last executing test programs: 1m39.809801573s ago: executing program 3 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1a0a, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}, 0x40) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x85, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000940)='\\[@]!\xb5)[:..\'\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map=r9, r6, 0x20, 0x3a, r7, @void, @void, @void, @value=r10, r8}, 0x20) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) socket$kcm(0x2d, 0x2, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r13, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 1m38.683530542s ago: executing program 3 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x20, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m37.481185023s ago: executing program 3 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1m37.137032985s ago: executing program 3 (id=31): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000) setresuid(0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = syz_clone3(0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x3, 0x0, r5, 0x0, r6, 0x0, 0xad}, 0x4, 0x0, 0x4, 0x5, 0x0, r7, 0x8}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 1m35.870092685s ago: executing program 3 (id=33): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x158, &(0x7f0000000500)=ANY=[], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x16f2, 0x800, 0x3, 0x379}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_emit_ethernet(0x125, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x1f, 0x4, 0x3, 0x4, 0x117, 0x66, 0x0, 0xd8, 0x6, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}, {@private=0xa010102, 0x6fea}]}, @timestamp_prespec={0x44, 0x2c, 0x10, 0x3, 0x3, [{@broadcast, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}, {@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0x4}]}, @generic={0x86, 0x11, "b66c0dce6e24964d792ab6b5924674"}, @rr={0x7, 0xf, 0x43, [@local, @rand_addr=0x64010102, @multicast1]}]}}, {{0x4e20, 0x4e23, r2, r3, 0x1, 0x0, 0x11, 0x8, 0x433c, 0x0, 0x1ff, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x2}, @window={0x3, 0x3, 0x7}, @md5sig={0x13, 0x12, "6ec0703f6c193f8fc999416e3eea66e1"}, @mss={0x2, 0x4, 0xdfc5}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x0, 0x4}, @exp_smc={0xfe, 0x6}]}}, {"c811910af52962916efdcd5d73fd3083bdb0ede1d29324c45053195203f1d79452be0cffd031a3540522ea6f8eaaab8640a0e1655e23ce021e9a8828d27e44a682863cfccb8dc03c96c6ea00a5db0190e7bef8b0e90475"}}}}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) epoll_create(0xe9b) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0xa, 0x0, 0x5e, 0x0, 0x100000000000006, 0x0, 0x5}) 1m34.272145771s ago: executing program 3 (id=40): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0xffffffff, 0x0, 0xf493}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r2, r2, 0x0, 0x400000000003f) r3 = dup(r2) fallocate(r3, 0x10, 0x0, 0x200) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfcc}], 0x2, 0x2040, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d6200100000000000000ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a0932f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c43ff010000000000000128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee99367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57d31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x8000000}, 0x10}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x39000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="c57c442e2140283a617244d27d4833b49597e2a6b651ce290628ba9a43a2e8874055895d90afe1eb9f0b5e1a29e34eee8303c3c401df84d1dece510206b1347512df6324bbb1ebef51ca5ba689c01986af7868cb00f00ebdf66918d86d0f94709209cdace79ad786253bdfb0e942b72faa182fedec277f7d23cddb70a921238b2325449b8d6339ec7264ef62874fde1e8804242dbbb72437aaf2a8d22acad80c202dc43b951322dbc11d68979405241549cefa0c07bf38396b9a0490569a9269a38bdc14ba8fae98"}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x2bc, r7, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x31, 0x24}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "bd60bc023f2d895771f5bd19379561cd5d03c563b69ce98ad3441157f7c75aaad1090037d67bb45d335b5d0d6cfb9fa16c0a04e37186ef6fe670a2cbe0d97e4c9c03517fa9db48025aacee9eedba4d5b9631f3dafbed80f8c3bd83f04cb69872558faeb605daed359bbc8503d8fd3c0d7e304583a7fb99a9e8fca731fcdce1980f84707bff9773c021767f0b41a29efc1dd3ab54bc28553af83bd5dd8effa2d7e4867193df8a5d4381b11678b5"}, @NL80211_ATTR_FRAME_MATCH={0x42, 0x5b, "3051d9a86d1d9e700d1d6fa9897b96b0207341b3c13503a7317317774add1c4c6bfb35b8c8a5935c327fffc2cded31bddad228530501439fdcc23954e842"}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "df36135a6290b1d529f0aca1884879f2749c901a2485ea2be1a246f4a493d3cbf49a26896e08683ab9491d76b25f71cc8158cec00a9a1a77f359f6764f9bc1b5ef6eb47144d3d0e6825cd48facf0aebcbc0d6aa5715f950caadec31aa1619ba17234d34792ece03d0dff9214a2f61b4783c17c2c4b6945477d6d2abc6fadb67f1790262ea90258f7325c7358f9c50866fc6951eb194c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "3efcbcd0f3acbde218e7f1ae1609bf97f545f0b0f0b38fc1e42b6a4bfaaa3de82c2f854135447877920fc0353ed35a6cfc1251ae57267f6c37fdcf660342ee41cc463ac4ea441f25666bb39580d5e8f1de2f1d2f0a0f53445cb070725f9f4b6db2289b51ccfb9a65ac8dad7c53b8896b4bb74f2fffffce01a208ef0c0410378c5b7104e1740b10f983c0a7525d822ce9ae869fb3f13b0f890ffb9486748d3d85f33f156c958ce06fc6666d49415fab8b2a2a0e837de63d3102d05b1b50c464d3894a08cf88a830759a4187acb0e8b2a528baf893f40c71f95bff87c72cb29e74804842f37de3fbd3c39cb618dbe3c92772"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x104}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m18.461447129s ago: executing program 32 (id=40): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0xffffffff, 0x0, 0xf493}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r2, r2, 0x0, 0x400000000003f) r3 = dup(r2) fallocate(r3, 0x10, 0x0, 0x200) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfcc}], 0x2, 0x2040, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x8000000}, 0x10}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x39000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="c57c442e2140283a617244d27d4833b49597e2a6b651ce290628ba9a43a2e8874055895d90afe1eb9f0b5e1a29e34eee8303c3c401df84d1dece510206b1347512df6324bbb1ebef51ca5ba689c01986af7868cb00f00ebdf66918d86d0f94709209cdace79ad786253bdfb0e942b72faa182fedec277f7d23cddb70a921238b2325449b8d6339ec7264ef62874fde1e8804242dbbb72437aaf2a8d22acad80c202dc43b951322dbc11d68979405241549cefa0c07bf38396b9a0490569a9269a38bdc14ba8fae98"}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x2bc, r7, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x31, 0x24}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "bd60bc023f2d895771f5bd19379561cd5d03c563b69ce98ad3441157f7c75aaad1090037d67bb45d335b5d0d6cfb9fa16c0a04e37186ef6fe670a2cbe0d97e4c9c03517fa9db48025aacee9eedba4d5b9631f3dafbed80f8c3bd83f04cb69872558faeb605daed359bbc8503d8fd3c0d7e304583a7fb99a9e8fca731fcdce1980f84707bff9773c021767f0b41a29efc1dd3ab54bc28553af83bd5dd8effa2d7e4867193df8a5d4381b11678b5"}, @NL80211_ATTR_FRAME_MATCH={0x42, 0x5b, "3051d9a86d1d9e700d1d6fa9897b96b0207341b3c13503a7317317774add1c4c6bfb35b8c8a5935c327fffc2cded31bddad228530501439fdcc23954e842"}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "df36135a6290b1d529f0aca1884879f2749c901a2485ea2be1a246f4a493d3cbf49a26896e08683ab9491d76b25f71cc8158cec00a9a1a77f359f6764f9bc1b5ef6eb47144d3d0e6825cd48facf0aebcbc0d6aa5715f950caadec31aa1619ba17234d34792ece03d0dff9214a2f61b4783c17c2c4b6945477d6d2abc6fadb67f1790262ea90258f7325c7358f9c50866fc6951eb194c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "3efcbcd0f3acbde218e7f1ae1609bf97f545f0b0f0b38fc1e42b6a4bfaaa3de82c2f854135447877920fc0353ed35a6cfc1251ae57267f6c37fdcf660342ee41cc463ac4ea441f25666bb39580d5e8f1de2f1d2f0a0f53445cb070725f9f4b6db2289b51ccfb9a65ac8dad7c53b8896b4bb74f2fffffce01a208ef0c0410378c5b7104e1740b10f983c0a7525d822ce9ae869fb3f13b0f890ffb9486748d3d85f33f156c958ce06fc6666d49415fab8b2a2a0e837de63d3102d05b1b50c464d3894a08cf88a830759a4187acb0e8b2a528baf893f40c71f95bff87c72cb29e74804842f37de3fbd3c39cb618dbe3c92772"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x104}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.495205125s ago: executing program 4 (id=278): syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x8018, 0xd800, 0x22, &(0x7f0000000180)="0000ffbbc8b5f1124db28d69c527a0a53c42e49a4f21ce701566235d13e368923907"}, {0x0, 0xba11, 0x0, 0x0}], 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10.696128375s ago: executing program 1 (id=283): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0x0, 0x0, 0x159000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x9047, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000380), 0x0, 0x4) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000540)={'syz0\x00', {0x6, 0x200, 0x4, 0x4f94}, 0x2b, [0x6, 0x71ed, 0x5, 0x49c66fc8, 0x80, 0x964, 0xfffffffe, 0xc, 0xff, 0x6, 0x22, 0x0, 0x5, 0x6, 0x734, 0x7, 0x3ff, 0x6f8c, 0x5, 0xa, 0x12, 0x0, 0x8000, 0x7, 0x4a, 0x5, 0x1ff, 0x9, 0x6, 0xe, 0x9, 0x303, 0x9, 0xd, 0x1, 0x81, 0x48d, 0xfffffffd, 0x4, 0x609e, 0x7, 0x2, 0x1fc0, 0x0, 0x800, 0x7, 0x6, 0x2, 0x5, 0x3, 0x1, 0xe, 0x0, 0x10, 0x4, 0x7, 0x5, 0x1, 0x3, 0x7, 0x3, 0x6, 0x2, 0xfb2], [0x48d3, 0x78b, 0x4e2d, 0x4, 0x90b, 0xfffffffc, 0xfe9, 0x7f, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x0, 0xc8a, 0x8, 0x0, 0x6, 0x3, 0x6, 0x6, 0x2, 0x8, 0xd61, 0x3, 0xa, 0x3, 0x5, 0xfff, 0x400, 0xc33, 0x3ef, 0x9, 0x400, 0x6, 0x80, 0x4, 0x7, 0x3, 0x4, 0x603, 0x1, 0x8, 0x22c74e62, 0xe6, 0x234a, 0x7, 0xf7f9, 0x0, 0x6, 0x7, 0x256a2f1d, 0x54dc, 0x87, 0x2, 0x1, 0x7, 0x9, 0x9, 0x6, 0x7fff, 0x9, 0x4], [0x1eb4, 0x527, 0x4, 0x7, 0x2, 0x0, 0x36, 0x1, 0x3ff, 0x1, 0x9, 0x3, 0x6, 0x6e7b, 0x7, 0x0, 0x1, 0x6, 0x4800, 0x1000, 0x200, 0x10000, 0x3, 0x6, 0x5, 0xffffff01, 0x7ff, 0x3, 0x0, 0x8, 0x5, 0x8, 0x6, 0xffff, 0x0, 0x7, 0x3, 0x2, 0x871, 0xa881, 0x9, 0xa8, 0x10, 0x101, 0x6, 0x4, 0x0, 0x0, 0x7f, 0x7, 0x800, 0x1, 0x9, 0x4, 0x4, 0x6, 0x7d, 0x5, 0x0, 0x6, 0xe93, 0x400, 0x5, 0x8], [0x0, 0x1, 0x81, 0x2, 0xe, 0x8, 0x8c4, 0x8, 0x6, 0x3, 0x6, 0x10001, 0x6, 0x40, 0x66, 0x8, 0x800, 0x8, 0x8, 0xff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x6, 0x7f, 0x2, 0x10000, 0xffff, 0x1, 0x6, 0x7, 0x7, 0xbd, 0x1, 0x80, 0x5, 0xfffffffb, 0x4, 0x40, 0x6, 0x4, 0x9, 0x1, 0x3ff, 0x0, 0x400, 0x6, 0x5, 0x401, 0x0, 0x7, 0x0, 0x600, 0x81, 0x2, 0x7, 0x4, 0x3, 0xfffe, 0x4, 0x5, 0xca3]}, 0x45c) syz_io_uring_submit(r2, r3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000001c0)=0x800) read$hiddev(r5, &(0x7f0000000080)=""/102, 0x18) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x1068) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) 9.902144014s ago: executing program 5 (id=286): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x40047454, &(0x7f00000019c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000001f28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4840}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) keyctl$setperm(0x5, 0x0, 0x1002400) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015050a"], 0x17) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) syz_io_uring_setup(0x50f4, &(0x7f00000001c0)={0x0, 0x78a9, 0x1, 0x0, 0x72}, &(0x7f0000000240), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 9.625128941s ago: executing program 0 (id=287): r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)=0x5}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000)}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x65, 0x0, &(0x7f0000003300), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) timer_create(0x0, &(0x7f0000000840)={0x0, 0x3c, 0x4}, &(0x7f0000000880)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000c80)={0x6, &(0x7f0000003480)=[{@none}, {@fixed}, {@fixed}, {}, {}, {}]}) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000002c80)=""/119, 0x77}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/94, 0x5e}], 0x7}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/103, 0x67}, {&(0x7f0000002d00)=""/254, 0xfe}, {&(0x7f00000008c0)=""/178, 0xb2}, {&(0x7f0000000080)=""/49, 0x31}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0xc}], 0x2, 0x40000001, &(0x7f0000002c00)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x20, 0x7, 0x20, 0x46b}, 0x48) 9.104005867s ago: executing program 4 (id=289): sync() socket$inet_tcp(0x2, 0x1, 0x0) getpriority(0x1, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = getuid() r5 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000004b40)={0x13d8, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfb, {0x15}, [@generic="79da5df3855577e644253d47e7d06ecd474f66384ab8587537b42d8ecafa4cb5da93b3d184ac850558b3edcbbb019aa26498f953e8dea9d19ea6a368b77c580464fbddb87f8dab716333f5f16ab11cc991c49c999a057409e2a2daf0cef9380250e0950123d0713ed0ff3109d88250eb2d69cfefcfe565f38d1cc6957988902b4d2bd27f086f1b6f039d9d194fa5b6ce4e621fc81d23d1f13e96516c0d3c1a6e127863ec97c50c67c3e50bdd6d85d1e9cb0d77fb307544b3177ccedda05eaf95371dc90a695ac75286d4a40db08349", @nested={0x12f3, 0x107, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x5e}, @generic="c8106f773c0489154c5052f16bd2b98e230189fb6fbc30784ed7960b050a5f1fdf72313f935f1ac47b633ba76923b9e5d01fbe14021d3fa9cfc71b3214fa34cd74233ca2dae74025d6bcc5c345f891a9fed61138681ba6fd03a1968a9507061bf8c4ce4233e0d07d990f45a79d4a70f5a3bc7a", @nested={0x1259, 0x7a, 0x0, 0x1, [@nested={0x1129, 0xaa, 0x0, 0x1, [@generic="d4743528bcac394567bcc0174c9087a9fe69766cc8ea482fd780e0f6f9765a7aab5ccdbc52f9ecfe51de5d546147d9c54c3b5cd645cdd1f7c2", @nested={0x4, 0x3f}, @typed={0xe7, 0x136, 0x0, 0x0, @binary="e94a68d0d1a7429616e2acef33194b03cce7eaadd27e0d8ac4d495825c35fc37b07b912a55545d953d15f54e7fe491718d58ad9c8873dbc2cd2e10af8d1bba4f5ec765d149cc20590447462e3fc370f71f569b9bfc3b6a7a2e99b9cf24c5e8d60008a1a1838f3a92862d2085f75eba76b5e183f5aafc0f46eaa708d70d27876c467d8aa9907e4693340d97d0642146c5779caa45ff41115f0b7ff4a187c2c08b42e1cc0436124e673a87675814db4d89cf6e3d44380f812f16394129d68560aa12443559c584bb9653e92ae73c606d0ff2f792325d64d0c002ce0bc9787fca961b5f6a"}, @generic="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"]}, @typed={0xc, 0x7e, 0x0, 0x0, @str='%\\-])%!\x00'}, @typed={0xc, 0x99, 0x0, 0x0, @u64=0x100}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r3}, @generic="7b953205251b82e2e2689feca4a2920797e6a157", @generic="7886c859dd28c24e70d773e8d3156d7f64ee81c6859005e90f18dea6b04c2dcb659bdbda54ba8c45847f599b3080d9a0c3da32baae732b3cefdc168656841689c748b74d65757145095f09efbfea5d404df801bca7830b3bbd01de7d42606fd6061f2c5a870f9b48e5", @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@loopback}, @nested={0x75, 0x82, 0x0, 0x1, [@nested={0x4, 0xa7}, @generic="ea4e8e2dd80d492b4ba7bd43ebfdf55b17e405fb1b2f75bb1c1ac182879a40cc834c9f64182d4537dba886b0102ffc6863700dd7ad42a72d3a10ef27aec73c1c1ac87ed229786c523e63867cca91f618d6dc07c95c07b7acd186ab024b", @typed={0x8, 0x12, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r4}]}]}, @nested={0x4, 0x4c}, @typed={0x8, 0xe5, 0x0, 0x0, @uid=r3}]}]}, 0x13d8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 8.660902601s ago: executing program 5 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000bffff"], 0x0, 0x26}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x118, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="681623ca58ac"}, @NL80211_ATTR_IE={0x15, 0x2a, [@ssid={0x0, 0x7, @random="dac7e3b531a23c"}, @mesh_chsw={0x76, 0x6, {0x1, 0x5, 0x2c, 0x37ae}}]}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @crypto_settings=[@NL80211_ATTR_PMK={0x21, 0xfe, "936254581fb1a8312591624f10b5fdff90669bdc179d5db3c94df1efe7"}, @NL80211_ATTR_SAE_PASSWORD={0x1c, 0x115, "07e571496bc70bd9adb5a6041314fa04e7c7d930e7e0f5a5"}, @NL80211_ATTR_SAE_PASSWORD={0x65, 0x115, "d8888f6028eae13c5730887f2df9cef4830ef176c682161729bb49024cd388c63bf1732c1b7fa595d288ed63f8e237e759663f36e8023ac0710cf74f7ade82386d6b94b7fa8745d47909da1f3c213828284341e9a33475f37602de9de428948354"}]]}, 0x118}, 0x1, 0x0, 0x0, 0x4000005}, 0x4080) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x48, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10) 8.660286961s ago: executing program 2 (id=291): socket(0x10, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a30000000000500010007000000240007"], 0x4c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000004a000100000000000000f4062c9b70b7549a17ec883def9b3e87f51afad4856f62f9396473a76c7ce5376c1993cd7ea56ef0d492ecf1fefd26c631535d4d503d7c3b70c43692e2faf97524692a000000000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240), 0x100) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, 0x0, 0x0, 0x6bf68237da62a01, 0x0) 8.547201049s ago: executing program 0 (id=292): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f0000000200)={0x1, [0x9, 0x6, 0x6], [{0x9a0, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x85, 0x5, 0x0, 0x1}, {0x3d4, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xb, 0x8, 0x0, 0x1, 0x1}, {0x9, 0x8001, 0x1, 0x1, 0x1}, {0x9, 0xd35957c, 0x1}, {0xb85, 0x2}, {0xe7, 0x6e04, 0x0, 0x0, 0x1}, {0x2, 0xffffdb54, 0x0, 0x1, 0x1, 0x1}, {0x6, 0xc, 0x0, 0x1, 0x0, 0x1}], 0x59}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a19, &(0x7f0000000300)={0x0, 0xede6, 0x400, 0x0, 0x182, 0x0, r5}, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'veth1\x00'}}) r8 = io_uring_setup(0x5597, &(0x7f0000000100)={0x0, 0xb2c0, 0x1, 0x10801, 0x1d2, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x16000000, 0x5, 0x3, 0x4, 0x5, 0xccd, 0xf, 0x7, 0xa, 0xe8a9, 0x6, 0x41, 0x2, 0x5, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0x800caa7, 0x40, 0x20001e58, 0x7, 0xe69, 0x3c, 0x7fffffff, 0x9, 0x0, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r0, 0x8cbab000) 7.091744822s ago: executing program 0 (id=293): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x31c, 0x30, 0x200, 0x0, 0x0, {}, [{0x308, 0x1, [@m_csum={0x1d4, 0x1a, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x74, 0x6, 0xbef, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x5, 0x20000000, 0xbb9, 0x8}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x82, 0x0, 0x0, 0x0, 0x8001}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x4, 0x101, 0x9}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x6, 0x5857, 0x5}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0xf6}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x5, 0x101, 0x7ff}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x18000, 0x4, 0x10001, 0x13}, 0x7a}}]}, {0xc7, 0x6, "a4bce04c7fb69434794e3f8b7803e4f94078346b3e3ed90c122ce9c76fcc038b31c7901d0a703175a380ab039f6dcca13015d62997678b469a4ee8c3afdf4f7894a05e1053c679c0b63988c727aace335a3d8fa923657c653c21a9dbf214f7f36a81c9bb468e2e572761aa397ea05de775a7c3cc3fd743b63838db57310e6a777fad6534569d27ae8ec760a8e9224d93bba977146d9e93f6418ac184a14380a4aa524171e8a8136ed76ea0e98f86cc6f7b953062ec9499fe60ef7d2889a179451c9a6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x130, 0x5, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ACTION={0x6, 0x3, 0xc}, @TCA_CT_ACTION={0x6, 0x3, 0x29}]}, {0xe8, 0x6, "1015fa72a7ac578c6f4940db62ffa70fa5c5c21f9f9299bb042d1b7d47db98d201f28a5fe42e2d0fa93bd6feb272dd0bab79be6c41638166e72fee1e015f61c345a8d80f4e1925776268211709fc38c75e87443150b9b0fd800057234314c6202037ca0a566d6cec5f4cbf459e5e6a72fc6df0c16fa56118820c2a1714bf950d472f02a06880f6859bb5198f47d11b8a74f2e0ea07cb023bda31df06d253adb7d2b85d4665902c5ca9850e0e7e2713960cd200b073fc0a4301477f766f40a0182a88b17c0ceb7442bdae52f770d38dc704dc36e4061dfbf2128a997382b6067556da5ba3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x14, 0x30, 0x400}, 0x14}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x124) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000640)="00214717a707000800000362e94fd9d789fdd44d9ac9", 0x16}], 0x1, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) 7.042130834s ago: executing program 5 (id=294): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251200000408000100", @ANYRES32=r2, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) (async) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) 7.007347472s ago: executing program 2 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000280)=""/195, 0xc3, 0x0) lseek(r2, 0x0, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r5) r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c4606028003000000000000000002003e"], 0x9c5) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) 6.465119462s ago: executing program 4 (id=296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x2000000, 0x12, 0xffffffffffffffff, 0xfffff000) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x0, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r4, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x40001019, r4, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x8, 0x8, 0x1, {0x0, r5, r0}}) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.925477267s ago: executing program 0 (id=297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r5 = syz_io_uring_setup(0x15f5, &(0x7f0000000380)={0x0, 0x6485, 0x8, 0x0, 0x28, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_enter(r5, 0x351e, 0x483, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000400)=0x7) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 5.825670811s ago: executing program 2 (id=298): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469"], 0xa0}}, 0x0) 5.798694354s ago: executing program 1 (id=299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x2529}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) (async) r1 = socket$unix(0x1, 0x873ef1ec0302ed51, 0x0) fchdir(r1) (async) lseek(r0, 0x6, 0x3) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) (async) r2 = epoll_create1(0x0) copy_file_range(r0, &(0x7f0000000180)=0x4, r2, &(0x7f00000001c0)=0x100, 0x9, 0x0) (async) r3 = open(&(0x7f0000000200)='./file0\x00', 0x3341395350951afd, 0xa1) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'veth0_to_bond\x00', @multicast}) close_range(r1, r3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r3, 0x20, &(0x7f0000001440)={&(0x7f00000003c0)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)=""/65, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x15, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x7, 0x1, 0x0, r3}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, @fallback=0x4, r3, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x1, 0x7}, 0x10, r5, r3, 0x2, &(0x7f00000014c0)=[r2, r3], &(0x7f0000001500)=[{0x2, 0x4, 0x1, 0xc}, {0x2, 0x2, 0xb, 0xc}], 0x10, 0x69}, 0x94) connect$inet6(r3, &(0x7f0000001600)={0xa, 0x4e20, 0x3, @private1, 0x401}, 0x1c) (async) syz_open_dev$swradio(&(0x7f0000001640), 0x1, 0x2) (async) writev(r3, &(0x7f0000001980)=[{&(0x7f0000001680)="3b29da40aa22d8a90d29b736f9dc6b662df4db18d752285089ba98939e7de419ff9f8842a04df7c01dfd42218530f06886cafe42623c3e0c94a6e95c1b81353c812ae123f0e2ea172644924504f876161e86ec57b7cdb77728c9f45c33efce488aa17c37fb375f7cc706673006a5768f0504e003cc68513e53ceea9d7839a26d692530f8d0ab4e17918c856ed4979fab725251fc64d90bfd98e147c99355ebbd675d2f803acf5c84349ac4db5b866b1571283639f296db03c582fa49dec6152faa", 0xc1}, {&(0x7f0000001780)="db41e9b3b329eabe53a25c6195d2ff7910043cb2b225320edfe577e448f3f28ce8e608992554677d5e6b7a1d53e9a43109ed9e2527bd7fc585e54d806e2a03825ccda5ac98fedf793d7d97b79b641c891107b0db7b79b3db773630d24cf43abdd5e2cf926d7a9efbc8c50c2a3e30d3", 0x6f}, {&(0x7f0000001800)="181b9f72eb155a20a42e99b79f6d0c555da5c834bebaa52ee38791e9610137e5efcbe9b50f2b2d2a707825592d47f5f78dfef45f65c265f2d7e1cc92ae3bab6cc1f78a66e5dd7ed8b7131ed6373055d2690b132bdafd1a7114864b74d481cf82eba6ec3f21fbd0b2db3b5d4240e8bbfb0c17beb178ccc80ab54e410bb5adb5835d594504b27dafb57f6c14b8aa43953441457bca", 0x94}, {&(0x7f00000018c0)="382003c69ac1a45c0433377f599ed07482a0977f6c6bd8512a2b62f2e93a1cce906f4aa0e01a41eadeadfc0bb22358741805e6a7300fb58ff660ab51583ea80dd2cd9bbc0a337424ab7bffb3d04595ed739b46adae37750a1629c1cab52f59ba69801573cffd2ad6646b90d2fe624f9169430e44109c1cb797066f03fc4c7ab2e39dcbab35bf996177", 0x89}], 0x4) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000001a00)={@local}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0xfff1, 0x8}, {0xfff1, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x841) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001b40)) (async) socket(0x2, 0x1, 0x9) (async) r7 = add_key$keyring(&(0x7f0000001e00), &(0x7f0000001e40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000001d40)='big_key\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)="4762e296cf8e7fdedf2e770ede69014b6a", 0x11, r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e80), 0x2002, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000001f00)={0x1, &(0x7f0000001ec0)=[{0x8, 0x80, 0x7, 0x2}]}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001f40), 0x44040, 0x0) ioctl$SNDCTL_DSP_POST(r9, 0x5008, 0x0) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) recvmsg$kcm(r9, &(0x7f0000003440)={&(0x7f0000001f80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002000)=""/36, 0x24}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/46, 0x2e}, {&(0x7f0000003080)=""/83, 0x53}, {&(0x7f0000003100)=""/200, 0xc8}, {&(0x7f0000003200)=""/177, 0xb1}], 0x6, &(0x7f0000003340)=""/237, 0xed}, 0x10001) 5.209268778s ago: executing program 1 (id=300): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 5.051442069s ago: executing program 2 (id=301): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000f80), 0x4, 0x2501) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000010c0)={&(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x0], 0x2, 0xa, 0x1, 0x1}) syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x5, @string={0x5, 0x3, "a2d941"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x0, 0xd, 0x81, {0x81, 0x1, "106e3382c9c69de320420a4993aa6ced61dbc64633a98547870ba8b07b279127c2d7a6838bc489dc57800e0b51b11bf41a2d8aa71613b9730db34e7464660c90a58ae3e2f352f3a232c8d3ae792f51bf89115f2da6212a72fde554efa85348b53f66ee727899ad6361ad8252beaef83f823498abfd82c27546738a29fc9dac"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f00000014c0)={0x34, &(0x7f0000001280)={0x0, 0x31, 0x10, "0af7d8433eee11abe5dfbd5ae6b3798c"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001340)={0x20, 0x0, 0xc2, {0xc0, "b5ef85164816874b075586658215dc8a87de38928aa772a55009b1d9ec3c4b0745a90c8be441f0eea8782bd752cc99956de1f63781bfef0b3afd3dda521defd931af697b5cb491309cddb955ddfe13c4629da03019910dbee0416f39517be64ff63ee731b5410eb5f5d7c190c9a92f31f49c4d5c9b4ca24335844bcc79228aa46981cd2c86cc2b91ab4ddd37fecccbf927ee245b45294172f024f67298f685020c81cac30ede81b1f4b0039f28b8ecdba17aa2c4e2e6f087251919ca86edfc27"}}, &(0x7f0000001440)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001480)={0x20, 0x0, 0x1, 0xd}}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xe1, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x3, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x12, 0x6, 0x1, 0x7, 0x4], 0x7}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x0, "dedd36c0"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x3, "f0ed0366"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x80, 0x2, "ba7685"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf3, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb, 0x0, 0x4, "89d279c0f3"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0xd5, 0x80, 'JD#', "f84015"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x26, 0x81, "fac0855b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x9, 0x5, {0x7, 0x25, 0x1, 0x82, 0x2a, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xda, 0x3, 0xaf, 0xfa, "89c576", "b687"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb, 0x9, 0x5, {0x7, 0x25, 0x1, 0x80, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x4, 0x6, 0xa, 0x20, 0x3}, 0x26, &(0x7f0000000040)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0xed, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa8, "bdcc5326abe26314b0e9d57fe9c47b97"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000001600)={0x14, &(0x7f0000001500)={0x40, 0x1, 0x61, {0x61, 0xd, "145d23ca4125e66d9520bb750d754cd52b54cd27115c29f6a35f323a26a301c8d261696e60d3e08531d4da35bd03604941e47fa0be6e89c30c04668f901c4d8b33106b25391bf951c7f2597209f4ee3bb4b8efaf2d6eea8a3f8c4231e5e0a1"}}, &(0x7f0000001580)={0x0, 0x3, 0x58, @string={0x58, 0x3, "1b73e513e43b6a6dfbdf0c11214ee3067e83f57242cdca764537a81ca905bee3bb3599976b9c53ce425814696bf5a811f612fa30d7c80de16753f7a5bf739e7f40f8ae945867f11b69e09727bcde51a117f127a58910"}}}, &(0x7f00000019c0)={0x44, &(0x7f0000001640)={0x20, 0x14, 0xe9, "45d8a41f9515f30de9bc6258c80356690b168f75cead25c17a02148e4fd9effb377a66608d5d075df7c3aa663fb7dc505a6da9044509c4561efbda2e623db4d25fe2353bab6a76f5a38143afe35352841414b64b2e73f3c93c7e7e9d8267774a9c6e3c0d959cd32653878159a8f0946c8b82b397507c308e8946df9058775e2be739358a8355846b3218a0427c2f30f43d90b5030557e8b2482268317cb024cb697d054f8f7c4b398931a2bcb4de31bcfb9a3043bff4616121eeabd6c13e110d9de4e81dd3271e23e468b14b68f04719db885a45cbf91aaae10300638a072d94ba1fe2030a1f42a614"}, &(0x7f0000001740)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001880)={0x20, 0x81, 0x1, 'A'}, &(0x7f00000018c0)={0x20, 0x82, 0x3, "b9b348"}, &(0x7f0000001900)={0x20, 0x83, 0x1, 'l'}, &(0x7f0000001940)={0x20, 0x84, 0x4, "db5f4ea5"}, &(0x7f0000001980)={0x20, 0x85, 0x3, "f656a5"}}) syz_usb_control_io(r2, 0x0, 0x0) 4.411619602s ago: executing program 1 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x84, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d247be1aaa38df0b19bcc88662f3b4a9"}, @NL80211_ATTR_PMK={0x14, 0xfe, "762b1be762c4eee15856629f8eb80a87"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "18531a200d9104b6fe2d632b2ba83a47"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x15}, @NL80211_ATTR_PMKID={0x14, 0x55, "a223c7b2477f6f0d49a0c1c8556fa5fc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x44}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r6, &(0x7f0000000080)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00') (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x2, 0x0, {0x1}}, 0x14}}, 0x8040) 4.253092467s ago: executing program 5 (id=303): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb3ad63efccfb97db) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) move_mount(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x102) r5 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x7}, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0xc) splice(r0, 0x0, r9, 0x0, 0x10d00, 0xf) 4.119198404s ago: executing program 1 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb20000000000001"}, 0x28) 2.910897279s ago: executing program 1 (id=305): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r1}, 0x18) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) read$alg(r2, &(0x7f0000000380)=""/75, 0x4b) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x2000000, 0x12, 0xffffffffffffffff, 0xfffff000) syz_io_uring_setup(0x32ba, &(0x7f0000000200)={0x0, 0x727c, 0x2, 0x0, 0x153}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0xf, 0x4, 0x2, 0xa33, 0xfffffffffffffffb, 0x1, 0x7fffffffffffffff, 0x6, 0x8, 0x5, 0x401, 0x0, 0x7fffffffffffffff, 0x5, 0x8aa], 0x3000, 0x10010}) 2.773108633s ago: executing program 4 (id=306): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x555100) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x115}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r1, r2, 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x9, 0x0, 0x5, 0x7}, {0x98, 0x9, 0x4, 0x6}, {0xd, 0x12, 0x0, 0xdfdd}, {0x3, 0x8c, 0x8, 0xa3}, {0x9, 0x5, 0x0, 0x1}, {0x7ab, 0x1, 0x0, 0xe}, {0x200, 0x1e, 0x8, 0x2755}, {0x7fff, 0x10, 0x4, 0x10}]}, 0x10) r4 = io_uring_setup(0x1898, &(0x7f0000000180)={0x0, 0x8b0e, 0x20, 0x1, 0x18e}) fchdir(r4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x400c010) r5 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x2, 0xd1, 0x20}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x140c, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x240cc009) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0)) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x6, 0x1}]}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) ioctl$FICLONE(r3, 0x40049409, r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x92}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) rt_tgsigqueueinfo(0x0, 0x0, 0x3f, &(0x7f0000000a40)={0x3b, 0x4, 0x7fff}) 2.430673278s ago: executing program 4 (id=307): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r6 = dup2(r2, r2) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x40000f0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8001}, 0x50) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, 0x0, &(0x7f0000000200)) 2.291817475s ago: executing program 0 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1.37696378s ago: executing program 5 (id=309): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) fcntl$addseals(r0, 0x409, 0xe) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000de0000000000000000000000000004d8e4539feffff533be70d8b2d62a2d735d0ef3276445525632c743d7d0a6361b805deb220231eed7adc768f6190ac5fb008dec19415719b209168d12bc6e7c7bf4d9fa92d57c5f300f779ebdfae04a53e0aedd6a03b5b5ce04481eac4ea90a32ce682ad346da57567fa0db739238393b969c0509256d734f57865a2ef9ebde8d6f0d948ed5b29f4a80b1601013b3963373c210f31e0e555108adc78ac62df5d15fb6e6be87fce042cf407354c2978328952b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0), 0x2000000}, 0x20) 1.376664479s ago: executing program 0 (id=310): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x7f, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000480)) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/73, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r6 = syz_clone3(&(0x7f0000000540)={0x21000c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000002c0), {0x6}, &(0x7f0000000680)=""/226, 0xe2, &(0x7f0000000780)=""/165, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r0}}, 0x58) prlimit64(r6, 0xb, &(0x7f0000000380)={0x5, 0xe216}, &(0x7f0000000840)) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) 1.261936895s ago: executing program 2 (id=311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x81bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mlockall(0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.171387132s ago: executing program 4 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = gettid() r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a3b200490000240064000000879078ac1414bbac14140c8907efe000006a860600000000000000"], 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r6, 0x400455cb, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) ioperm(0x7fffffffffffffff, 0x5, 0x5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x22002, 0x2, 0x14}, 0x18) 2.16711ms ago: executing program 5 (id=313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000066c0)=[{{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000840)="e22967e17c6abc5433a82040b2784ae8890a5f2e8c125af6b585d6a9aab1e20f113823cf5347f5836b2af6ab66fde9d9fa78edd44f167f54f2267c91a92441b222291284ae43d0475f1dd870c88404c8cb7a2ef794a54bdd9dc3d766d1aaf3564142362c3373ce8a5db922107bd6fc5cb7860cb837f6bf4c01d955d4a003729c5aa6bd3fbb531cb992bc4dcb810631c98f1517bedb0db82018bc9612e686e0fdfee1a8d78999ad6c5fb20ef498", 0xad}, {&(0x7f0000000a80)="1194eb1dc629ffc71834974dab1e103f9e5009b7dd5d1c6932a26594a38766d4070aaf1a6734b6989638d242a2b839a3fe2da7478048e8abc0ad43008c961d3626baf947cd80705d342f31c7a5dcdfee796304b630c0dc2a2cb2c8dc6f56ee48327c7662f48fd890c823d337bf9566d39d6f565ac8877ba9e118af5b4ddbc988ad26fb600dd01b84d25ba1e958c0f5c4c794ca10a02fc14023b9ef266ef0f49eeb18dbac03c9e6d191cc", 0xaa}, {&(0x7f0000000940)="981610efac182b1ed212d5955f2930e7875a234cabdddca372", 0x19}, {&(0x7f0000000980)="62977a88390c31b539e5a7dd9fa6b9a71d0c1d1dd292e3a7701a711f439fc92a8b075c2c04ff3d4cf0f31b39148955db87d804fb093099e1eb064628a2536953ff14837fa1026de1cda684aa78d82d3b920acdd68327bd05ff77db0699ea70f31db49a59b7ad13038fa5d6a570d7263a8ffa517f8cf1ac1f3ee2bfab16877db31c886e1ed486606a0de8f1b41d67d3e7d69ee4c9152f53e1a125427b2ede5ada9d88c12b94c9b0ceb92a7e6607f4299a", 0xb0}], 0x4, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40005}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)="f4e510a4", 0x4}, {&(0x7f0000001100)="27686271b1ab82e1765a896b4d1f49", 0xf}, {&(0x7f0000001140)="395a65d831b4e7d7f7767d6cbd07cc9858643bf74fc5bed5216192250a9e2af5746aa1bafc706bb9e9e88a434732922599753c5e10435d36483553223e704ce0be89d92a398f4af8aa438f76e7186ee4c47b2c3aa8", 0x55}], 0x3, &(0x7f00000063c0)=ANY=[@ANYBLOB="200000000000000001000180c8000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4c411}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006440)="624cb47c97f298dc8093f6501a56441b533fe33550753457cd992bfea6ae8213f92c032b6eb1dd26413d6c2c287b6aec3b38fb066f8dfd72ac5e7cdb78d53127916bd553b17dc6973c4dad0e570c0d7de7905046108ce8fbd9dfac1921800cd69253c2914fe0968c76793a83ecd9d3c546113798ce4f819ec872431c398ba77b291ae3f0afdd80d964b4ac6dc4ff9ff8f0781f6dad51e7410bcb9a7054374190fd41b40983ca10c8a67ef78f356c74e9fb27f2a6359c711f2ba05c3fcac82b770ad7442ea527a1e2abe2c2646a720e031855b5c755fbe443efd76539d200f00e34154a8fdf", 0xe5}], 0x1, &(0x7f0000006600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xb8, 0x4000004}}], 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xe, 0x3, @thr={0x0, 0x0}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRES16=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x9, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r9}, 0x10) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x138, 0x2b8, 0xb0000010, 0x138, 0x5c8f0200, 0x230, 0x3a8, 0x3a8, 0x230, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff86) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff004) 0s ago: executing program 2 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) munlock(&(0x7f00007c6000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0xfffffffe, 0x7, {{0x10, 0x4, 0x0, 0x30, 0x40, 0x64, 0x0, 0xca, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, {[@noop, @cipso={0x86, 0x2b, 0x3, [{0x2, 0xc, "7f8c918aba25d3bedba7"}, {0x5, 0x7, "43cca3e313"}, {0x7, 0x12, "ba0777b567123945b157ff2ca3a3e44f"}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x1c087, 0x40008}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_EXT_MASK={0x8, 0x1d, 0xd6}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) recvmmsg(r3, &(0x7f0000000240)=[{{&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/171, 0xab}, {&(0x7f00000000c0)=""/16, 0x10}], 0x2}, 0x6}], 0x1, 0x22, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 66.979454][ T30] audit: type=1400 audit(1753757913.529:62): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.984724][ T5819] cgroup: Unknown subsys name 'net' [ 67.007467][ T30] audit: type=1400 audit(1753757913.529:63): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.029741][ T30] audit: type=1400 audit(1753757913.569:64): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.194963][ T5819] cgroup: Unknown subsys name 'cpuset' [ 67.202883][ T5819] cgroup: Unknown subsys name 'rlimit' [ 67.351493][ T30] audit: type=1400 audit(1753757913.899:65): avc: denied { setattr } for pid=5819 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.374809][ T30] audit: type=1400 audit(1753757913.899:66): avc: denied { create } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.414821][ T30] audit: type=1400 audit(1753757913.929:67): avc: denied { write } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.439401][ T30] audit: type=1400 audit(1753757913.929:68): avc: denied { read } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.459968][ T30] audit: type=1400 audit(1753757913.939:69): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.484942][ T30] audit: type=1400 audit(1753757913.939:70): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 67.508437][ T30] audit: type=1400 audit(1753757913.959:71): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.534877][ T5821] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.510525][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.088010][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.094622][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.266051][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 72.266067][ T30] audit: type=1400 audit(1753757918.819:78): avc: denied { create } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.335461][ T30] audit: type=1400 audit(1753757918.849:79): avc: denied { read write } for pid=5829 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.373706][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.382387][ T30] audit: type=1400 audit(1753757918.849:80): avc: denied { open } for pid=5830 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.383809][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.416730][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.425974][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.434072][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.436015][ T30] audit: type=1400 audit(1753757918.849:81): avc: denied { open } for pid=5829 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.450140][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.473002][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.481367][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.494424][ T30] audit: type=1400 audit(1753757918.869:82): avc: denied { ioctl } for pid=5830 comm="syz-executor" path="socket:[4247]" dev="sockfs" ino=4247 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.506098][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.521435][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.529029][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.541690][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.541933][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.557198][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.557284][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.565724][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.572984][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.580700][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.586459][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.609686][ T30] audit: type=1400 audit(1753757919.139:83): avc: denied { read } for pid=5831 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.631020][ T30] audit: type=1400 audit(1753757919.139:84): avc: denied { open } for pid=5831 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.632623][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.660832][ T30] audit: type=1400 audit(1753757919.159:85): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.661330][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.683184][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.704067][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.721526][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.736158][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.109905][ T30] audit: type=1400 audit(1753757919.659:86): avc: denied { module_request } for pid=5831 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.230498][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.280021][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 73.395164][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 73.479588][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.527967][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.536284][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.544097][ T5831] bridge_slave_0: entered allmulticast mode [ 73.550971][ T5831] bridge_slave_0: entered promiscuous mode [ 73.596504][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.603864][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.611023][ T5831] bridge_slave_1: entered allmulticast mode [ 73.618294][ T5831] bridge_slave_1: entered promiscuous mode [ 73.625509][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.655779][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.663058][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.670896][ T5839] bridge_slave_0: entered allmulticast mode [ 73.678005][ T5839] bridge_slave_0: entered promiscuous mode [ 73.686386][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.693687][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.700886][ T5839] bridge_slave_1: entered allmulticast mode [ 73.708727][ T5839] bridge_slave_1: entered promiscuous mode [ 73.736002][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.744120][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.751405][ T5829] bridge_slave_0: entered allmulticast mode [ 73.758907][ T5829] bridge_slave_0: entered promiscuous mode [ 73.805014][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.812171][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.819656][ T5829] bridge_slave_1: entered allmulticast mode [ 73.826866][ T5829] bridge_slave_1: entered promiscuous mode [ 73.865349][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.896071][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.905549][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.915314][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.922701][ T5835] bridge_slave_0: entered allmulticast mode [ 73.929531][ T5835] bridge_slave_0: entered promiscuous mode [ 73.939834][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.966273][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.977938][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.987414][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.994638][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.001817][ T5835] bridge_slave_1: entered allmulticast mode [ 74.009647][ T5835] bridge_slave_1: entered promiscuous mode [ 74.031745][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.097149][ T5839] team0: Port device team_slave_0 added [ 74.113621][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.125702][ T5831] team0: Port device team_slave_0 added [ 74.151457][ T5839] team0: Port device team_slave_1 added [ 74.165302][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.185520][ T5831] team0: Port device team_slave_1 added [ 74.203937][ T5829] team0: Port device team_slave_0 added [ 74.241405][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.248654][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.256425][ T5830] bridge_slave_0: entered allmulticast mode [ 74.263876][ T5830] bridge_slave_0: entered promiscuous mode [ 74.272970][ T5829] team0: Port device team_slave_1 added [ 74.291338][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.298406][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.324561][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.345620][ T5835] team0: Port device team_slave_0 added [ 74.355977][ T5835] team0: Port device team_slave_1 added [ 74.375852][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.383395][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.409482][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.420781][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.428017][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.435255][ T5830] bridge_slave_1: entered allmulticast mode [ 74.442079][ T5830] bridge_slave_1: entered promiscuous mode [ 74.462197][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.469416][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.495379][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.539995][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.547267][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.574338][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.611961][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.619055][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.645227][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.657762][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.665197][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.686965][ T5838] Bluetooth: hci2: command tx timeout [ 74.696978][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.709096][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.716214][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.742715][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.762455][ T5844] Bluetooth: hci3: command tx timeout [ 74.762600][ T5851] Bluetooth: hci1: command tx timeout [ 74.768358][ T5838] Bluetooth: hci0: command tx timeout [ 74.784078][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.799939][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.806987][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.833095][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.852426][ T5838] Bluetooth: hci4: command tx timeout [ 74.872934][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.916103][ T5839] hsr_slave_0: entered promiscuous mode [ 74.924137][ T5839] hsr_slave_1: entered promiscuous mode [ 74.958003][ T5830] team0: Port device team_slave_0 added [ 74.968005][ T5831] hsr_slave_0: entered promiscuous mode [ 74.975209][ T5831] hsr_slave_1: entered promiscuous mode [ 74.981270][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.989368][ T5831] Cannot create hsr debugfs directory [ 75.019339][ T5830] team0: Port device team_slave_1 added [ 75.102999][ T5835] hsr_slave_0: entered promiscuous mode [ 75.109437][ T5835] hsr_slave_1: entered promiscuous mode [ 75.116296][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.124710][ T5835] Cannot create hsr debugfs directory [ 75.135974][ T5829] hsr_slave_0: entered promiscuous mode [ 75.142387][ T5829] hsr_slave_1: entered promiscuous mode [ 75.148463][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.156358][ T5829] Cannot create hsr debugfs directory [ 75.176182][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.183192][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.209436][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.263981][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.270960][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.297422][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.503559][ T5830] hsr_slave_0: entered promiscuous mode [ 75.510061][ T5830] hsr_slave_1: entered promiscuous mode [ 75.517540][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.525770][ T5830] Cannot create hsr debugfs directory [ 75.783182][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.823891][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.839767][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.866058][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.896844][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.920373][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.933372][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.955351][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.007603][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.035410][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.062169][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.083896][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.170803][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.185947][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.197162][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.244191][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.328818][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.381198][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.412002][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.425482][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.451508][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.459520][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.502098][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.509364][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.527055][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.557186][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.564404][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.619239][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.665803][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.695878][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.703238][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.726407][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.733633][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.749677][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.762996][ T5838] Bluetooth: hci2: command tx timeout [ 76.781077][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.788287][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.817816][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.825027][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.844066][ T5851] Bluetooth: hci0: command tx timeout [ 76.844074][ T5844] Bluetooth: hci3: command tx timeout [ 76.855479][ T5838] Bluetooth: hci1: command tx timeout [ 76.923168][ T5851] Bluetooth: hci4: command tx timeout [ 76.930551][ T30] audit: type=1400 audit(1753757923.479:87): avc: denied { sys_module } for pid=5839 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.959848][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.014356][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.022048][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.065437][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.099961][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.131368][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.138568][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.165984][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.173187][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.190123][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.197336][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.239268][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.246532][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.285492][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.436257][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.495512][ T5839] veth0_vlan: entered promiscuous mode [ 77.538275][ T5839] veth1_vlan: entered promiscuous mode [ 77.588150][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.689327][ T5829] veth0_vlan: entered promiscuous mode [ 77.715718][ T5839] veth0_macvtap: entered promiscuous mode [ 77.755010][ T5839] veth1_macvtap: entered promiscuous mode [ 77.777374][ T5829] veth1_vlan: entered promiscuous mode [ 77.851742][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.899729][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.918843][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.938302][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.985247][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.996086][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005388][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014566][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.030981][ T5829] veth0_macvtap: entered promiscuous mode [ 78.045989][ T5829] veth1_macvtap: entered promiscuous mode [ 78.103837][ T5835] veth0_vlan: entered promiscuous mode [ 78.144926][ T5830] veth0_vlan: entered promiscuous mode [ 78.154211][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.175294][ T5835] veth1_vlan: entered promiscuous mode [ 78.195939][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.213185][ T5830] veth1_vlan: entered promiscuous mode [ 78.237197][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.247282][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.256826][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265660][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.314565][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.336887][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.349274][ T5831] veth0_vlan: entered promiscuous mode [ 78.418366][ T5830] veth0_macvtap: entered promiscuous mode [ 78.437828][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.440509][ T5831] veth1_vlan: entered promiscuous mode [ 78.461401][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.462195][ T5830] veth1_macvtap: entered promiscuous mode [ 78.500120][ T5835] veth0_macvtap: entered promiscuous mode [ 78.512167][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.512952][ T30] audit: type=1400 audit(1753757925.059:88): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.Lp1YPL/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.530505][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.580779][ T5835] veth1_macvtap: entered promiscuous mode [ 78.597520][ T30] audit: type=1400 audit(1753757925.099:89): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.623097][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.650693][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.652177][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.671035][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.681267][ T30] audit: type=1400 audit(1753757925.099:90): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.Lp1YPL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.708219][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.715683][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.725518][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734875][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.744176][ T30] audit: type=1400 audit(1753757925.099:91): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.751727][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.769718][ T30] audit: type=1400 audit(1753757925.119:92): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.Lp1YPL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.826522][ T5831] veth0_macvtap: entered promiscuous mode [ 78.855339][ T5831] veth1_macvtap: entered promiscuous mode [ 78.855545][ T5851] Bluetooth: hci2: command tx timeout [ 78.866215][ T30] audit: type=1400 audit(1753757925.119:93): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.Lp1YPL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.922609][ T5851] Bluetooth: hci0: command tx timeout [ 78.928075][ T5851] Bluetooth: hci3: command tx timeout [ 78.934692][ T5851] Bluetooth: hci1: command tx timeout [ 78.945182][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.966030][ T30] audit: type=1400 audit(1753757925.119:94): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.970463][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.000402][ T30] audit: type=1400 audit(1753757925.129:95): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.025619][ T5838] Bluetooth: hci4: command tx timeout [ 79.056257][ T30] audit: type=1400 audit(1753757925.129:96): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="gadgetfs" ino=6856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 79.076076][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.088950][ T30] audit: type=1400 audit(1753757925.149:97): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.118800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.131473][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.206958][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.225233][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.234828][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.249575][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.267150][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.306527][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.625316][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.648902][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657710][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.665868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.716076][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.865751][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.895422][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.917340][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.936259][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.029553][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.056303][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.180231][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.205222][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.427791][ T5968] input: syz1 as /devices/virtual/input/input5 [ 80.572214][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.582107][ T5910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.629513][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.798884][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 80.846587][ T5910] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.860398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.869039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.923773][ T5838] Bluetooth: hci2: command tx timeout [ 80.946717][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.956579][ T5910] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 80.969741][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.972561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.005631][ T5838] Bluetooth: hci1: command tx timeout [ 81.011054][ T5838] Bluetooth: hci3: command tx timeout [ 81.016672][ T5838] Bluetooth: hci0: command tx timeout [ 81.082841][ T5851] Bluetooth: hci4: command tx timeout [ 81.108351][ T5910] usb 3-1: config 0 descriptor?? [ 81.155727][ T5971] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.315012][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.329036][ T43] cfg80211: failed to load regulatory.db [ 81.336013][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.359642][ T5971] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 81.369292][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.378369][ T5971] usb 5-1: Product: syz [ 81.382800][ T5971] usb 5-1: Manufacturer: syz [ 81.387517][ T5971] usb 5-1: SerialNumber: syz [ 81.415403][ T5971] usb 5-1: config 0 descriptor?? [ 81.426645][ T5971] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 81.433487][ T5971] usb 5-1: No valid video chain found. [ 81.482694][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.647305][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 81.661386][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.668520][ T5974] process 'syz.4.5' launched '/dev/fd/6' with NULL argv: empty string added [ 81.672625][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.692492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.701083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.709768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.718519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.747312][ T5902] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 81.756671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.766270][ T5876] usb 5-1: USB disconnect, device number 2 [ 81.773592][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 81.817121][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 81.842924][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.863060][ T5910] usb 3-1: USB disconnect, device number 2 [ 81.895733][ T5902] usb 4-1: config 0 descriptor?? [ 82.064769][ T5984] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 82.477810][ T5902] belkin 0003:050D:3201.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 82.654336][ T5995] dlm: no local IP address has been set [ 82.660510][ T5995] dlm: cannot start dlm midcomms -107 [ 82.924867][ T5876] usb 4-1: USB disconnect, device number 2 [ 83.470185][ T6004] netlink: 'syz.0.15': attribute type 11 has an invalid length. [ 84.438093][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 84.438109][ T30] audit: type=1400 audit(1753757930.989:164): avc: denied { write } for pid=6007 comm="syz.3.17" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.481449][ T5990] fido_id[5990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 85.260183][ T30] audit: type=1400 audit(1753757931.269:165): avc: denied { read } for pid=6007 comm="syz.3.17" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.309080][ T6015] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 85.316960][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 85.529093][ T30] audit: type=1400 audit(1753757931.279:166): avc: denied { open } for pid=6007 comm="syz.3.17" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.615507][ T30] audit: type=1400 audit(1753757931.279:167): avc: denied { ioctl } for pid=6007 comm="syz.3.17" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.662918][ T30] audit: type=1400 audit(1753757931.859:168): avc: denied { create } for pid=6010 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.684193][ T30] audit: type=1400 audit(1753757931.859:169): avc: denied { setopt } for pid=6010 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.684396][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.714936][ T30] audit: type=1400 audit(1753757931.859:170): avc: denied { bind } for pid=6010 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.982428][ T30] audit: type=1400 audit(1753757931.859:171): avc: denied { name_bind } for pid=6010 comm="syz.0.16" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.982701][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 86.007426][ T30] audit: type=1400 audit(1753757931.859:172): avc: denied { node_bind } for pid=6010 comm="syz.0.16" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 86.053705][ T30] audit: type=1400 audit(1753757931.859:173): avc: denied { create } for pid=6010 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 86.190617][ T6030] dlm: no local IP address has been set [ 86.199454][ T6030] dlm: cannot start dlm midcomms -107 [ 86.478340][ T5848] Process accounting resumed [ 86.486962][ T6028] Zero length message leads to an empty skb [ 86.521966][ T6028] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 87.893804][ T6044] comedi comedi3: pcmda12: I/O port conflict (0x16000000,16) [ 89.198636][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.219722][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 89.303181][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.385881][ T6058] No control pipe specified [ 89.565121][ T6058] xt_nfacct: accounting object `syz1' does not exists [ 89.802579][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 89.936996][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.022077][ T5876] usb 1-1: can't read configurations, error -71 [ 90.064267][ T9] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 90.113157][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 90.140163][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 90.140177][ T30] audit: type=1400 audit(1753757936.689:202): avc: denied { setopt } for pid=6066 comm="syz.3.33" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.193131][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.202203][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.270466][ T9] usb 3-1: Product: syz [ 90.301610][ T9] usb 3-1: Manufacturer: syz [ 90.323583][ T5848] Process accounting resumed [ 90.335597][ T9] usb 3-1: SerialNumber: syz [ 90.368609][ T6054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.704898][ T30] audit: type=1400 audit(1753757937.259:203): avc: denied { create } for pid=6074 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.706261][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 90.768326][ T30] audit: type=1400 audit(1753757937.309:204): avc: denied { create } for pid=6074 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.010670][ T6083] vlan2: entered promiscuous mode [ 91.020033][ T6083] vlan2: entered allmulticast mode [ 91.141239][ T6083] hsr_slave_1: entered allmulticast mode [ 91.156818][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 91.211216][ T9] usb 3-1: USB disconnect, device number 3 [ 91.284485][ T6087] 9pnet_fd: Insufficient options for proto=fd [ 91.301817][ T30] audit: type=1400 audit(1753757937.849:205): avc: denied { create } for pid=6086 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.360332][ T30] audit: type=1400 audit(1753757937.849:206): avc: denied { connect } for pid=6086 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.617767][ T30] audit: type=1400 audit(1753757938.169:207): avc: denied { ioctl } for pid=6092 comm="syz.0.41" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.443245][ T30] audit: type=1400 audit(1753757938.959:208): avc: denied { ioctl } for pid=6107 comm="syz.0.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8491 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.487634][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.502329][ T30] audit: type=1400 audit(1753757938.959:209): avc: denied { write } for pid=6107 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.722025][ T30] audit: type=1400 audit(1753757940.269:210): avc: denied { ioctl } for pid=6120 comm="syz.4.47" path="socket:[7689]" dev="sockfs" ino=7689 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.367544][ T30] audit: type=1400 audit(1753757940.869:211): avc: denied { write } for pid=6132 comm="syz.4.51" name="mcfilter" dev="proc" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.390266][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.682421][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.807119][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 95.807160][ T30] audit: type=1400 audit(1753757942.349:213): avc: denied { create } for pid=6144 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.837937][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.858769][ T9] usb 5-1: device descriptor read/64, error -71 [ 95.983999][ T30] audit: type=1400 audit(1753757942.489:214): avc: denied { sqpoll } for pid=6144 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.282400][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.346526][ T30] audit: type=1400 audit(1753757942.649:215): avc: denied { ioctl } for pid=6144 comm="syz.1.54" path="socket:[7741]" dev="sockfs" ino=7741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.371394][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.812329][ T30] audit: type=1400 audit(1753757943.279:216): avc: denied { unlink } for pid=5839 comm="syz-executor" name="file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.012274][ T9] usb 5-1: device descriptor read/64, error -71 [ 97.253728][ T30] audit: type=1400 audit(1753757943.799:217): avc: denied { name_bind } for pid=6154 comm="syz.0.57" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.363070][ T9] usb usb5-port1: attempt power cycle [ 97.482661][ T30] audit: type=1400 audit(1753757944.039:218): avc: denied { create } for pid=6161 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.572534][ T6163] sctp: [Deprecated]: syz.2.58 (pid 6163) Use of int in max_burst socket option. [ 97.572534][ T6163] Use struct sctp_assoc_value instead [ 97.587903][ T30] audit: type=1400 audit(1753757944.119:219): avc: denied { setopt } for pid=6161 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.872563][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.972330][ T9] usb 5-1: device descriptor read/8, error -71 [ 98.212668][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.284343][ T9] usb 5-1: device descriptor read/8, error -71 [ 98.412581][ T9] usb usb5-port1: unable to enumerate USB device [ 98.597900][ T5848] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 98.972619][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.002218][ T30] audit: type=1400 audit(1753757945.549:220): avc: denied { create } for pid=6171 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.037305][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 99.053242][ T30] audit: type=1400 audit(1753757945.549:221): avc: denied { ioctl } for pid=6171 comm="syz.4.61" path="socket:[7845]" dev="sockfs" ino=7845 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.077621][ T30] audit: type=1400 audit(1753757945.549:222): avc: denied { ioctl } for pid=6171 comm="syz.4.61" path="socket:[7846]" dev="sockfs" ino=7846 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 99.131871][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.249229][ T6175] ip6t_srh: unknown srh match flags B153 [ 99.810456][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 99.824541][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 99.837805][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.845701][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 99.856466][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.872429][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 99.895917][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 99.983464][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.999679][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 100.028417][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.079067][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 100.098230][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.131262][ T5848] usb 3-1: string descriptor 0 read error: -22 [ 100.154102][ T5848] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.189035][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.223159][ T5848] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.714955][ T9] usb 3-1: USB disconnect, device number 4 [ 100.889884][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 100.889900][ T30] audit: type=1400 audit(1753757947.419:229): avc: denied { getopt } for pid=6184 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.592537][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 101.619657][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 101.703265][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 102.130714][ T6199] batman_adv: batadv0: Adding interface: ipvlan2 [ 102.137274][ T6199] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.163501][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.173944][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.183793][ T6199] batman_adv: batadv0: Interface activated: ipvlan2 [ 102.286435][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.358457][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 102.411764][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.441199][ T9] usb 5-1: config 0 descriptor?? [ 102.672388][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.842371][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 103.196350][ T9] asus 0003:0B05:17E0.0002: item fetching failed at offset 2/5 [ 103.205969][ T9] asus 0003:0B05:17E0.0002: Asus hid parse failed: -22 [ 103.213373][ T9] asus 0003:0B05:17E0.0002: probe with driver asus failed with error -22 [ 103.224710][ T30] audit: type=1400 audit(1753757949.319:230): avc: denied { bind } for pid=6205 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.256983][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.280598][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.302448][ T9] usb 5-1: USB disconnect, device number 7 [ 103.444580][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.530434][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.560620][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.589685][ T5876] usb 3-1: config 0 descriptor?? [ 104.485445][ T6222] dlm: no local IP address has been set [ 104.491234][ T6222] dlm: cannot start dlm midcomms -107 [ 104.572383][ T6223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.72'. [ 104.898493][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 104.977035][ T5876] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 105.002221][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.032502][ T30] audit: type=1400 audit(1753757951.549:231): avc: denied { map } for pid=6212 comm="syz.4.72" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.065213][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.082428][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.094255][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.104990][ T30] audit: type=1400 audit(1753757951.549:232): avc: denied { execute } for pid=6212 comm="syz.4.72" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.130440][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.147955][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.159258][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.192343][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.199834][ T30] audit: type=1400 audit(1753757951.589:233): avc: denied { create } for pid=6225 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.229371][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.249072][ T5876] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 105.256851][ T30] audit: type=1400 audit(1753757951.589:234): avc: denied { setopt } for pid=6225 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.296412][ T5876] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 105.364538][ T5876] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 105.381652][ T30] audit: type=1400 audit(1753757951.589:235): avc: denied { getopt } for pid=6225 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.569197][ T5876] microsoft 0003:045E:07DA.0003: no inputs found [ 105.592371][ T5876] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 105.605468][ T30] audit: type=1400 audit(1753757951.589:236): avc: denied { write } for pid=6225 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.666782][ T5876] usb 3-1: USB disconnect, device number 5 [ 105.688218][ T30] audit: type=1400 audit(1753757951.589:237): avc: denied { ioctl } for pid=6225 comm="syz.1.75" path="socket:[8767]" dev="sockfs" ino=8767 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.718790][ T6230] fido_id[6230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 105.896364][ T30] audit: type=1400 audit(1753757952.139:238): avc: denied { write } for pid=6232 comm="syz.4.77" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.062449][ T30] audit: type=1400 audit(1753757952.159:239): avc: denied { map } for pid=6232 comm="syz.4.77" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.188811][ T30] audit: type=1400 audit(1753757952.659:240): avc: denied { bind } for pid=6238 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.371049][ T30] audit: type=1400 audit(1753757952.659:241): avc: denied { setopt } for pid=6238 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.913536][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 106.930849][ T30] audit: type=1400 audit(1753757952.659:242): avc: denied { write } for pid=6238 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.272576][ T30] audit: type=1400 audit(1753757952.659:243): avc: denied { getopt } for pid=6238 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.361601][ T30] audit: type=1326 audit(1753757952.789:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da118e9a9 code=0x7ffc0000 [ 107.453358][ T30] audit: type=1326 audit(1753757952.789:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da118e9a9 code=0x7ffc0000 [ 107.505743][ T30] audit: type=1326 audit(1753757952.789:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da118e9a9 code=0x7ffc0000 [ 107.565981][ T30] audit: type=1326 audit(1753757952.789:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da118e9a9 code=0x7ffc0000 [ 108.231367][ T6265] GUP no longer grows the stack in syz.4.85 (6265): 200000004000-20000000a000 (200000002000) [ 108.242069][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.4.85 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 108.242101][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.242119][ T6265] Call Trace: [ 108.242128][ T6265] [ 108.242140][ T6265] dump_stack_lvl+0x16c/0x1f0 [ 108.242183][ T6265] gup_vma_lookup+0x1d2/0x220 [ 108.242209][ T6265] __get_user_pages+0x271/0x3b80 [ 108.242246][ T6265] ? __pfx___get_user_pages+0x10/0x10 [ 108.242283][ T6265] get_user_pages_remote+0x258/0xb20 [ 108.242311][ T6265] ? irqentry_exit+0x3b/0x90 [ 108.242334][ T6265] ? __pfx_get_user_pages_remote+0x10/0x10 [ 108.242365][ T6265] ? __access_remote_vm+0x467/0x810 [ 108.242390][ T6265] __access_remote_vm+0x246/0x810 [ 108.242416][ T6265] ? do_raw_spin_lock+0x12c/0x2b0 [ 108.242440][ T6265] ? __pfx___access_remote_vm+0x10/0x10 [ 108.242471][ T6265] proc_pid_cmdline_read+0x4de/0x900 [ 108.242506][ T6265] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 108.242535][ T6265] ? kcov_open+0x50/0x80 [ 108.242559][ T6265] ? rw_verify_area+0xcf/0x680 [ 108.242587][ T6265] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 108.242617][ T6265] vfs_readv+0x5be/0x8b0 [ 108.242651][ T6265] ? __pfx_vfs_readv+0x10/0x10 [ 108.242702][ T6265] ? __fget_files+0x20e/0x3c0 [ 108.242729][ T6265] ? do_preadv+0x1a6/0x270 [ 108.242756][ T6265] do_preadv+0x1a6/0x270 [ 108.242785][ T6265] ? __pfx_do_preadv+0x10/0x10 [ 108.242820][ T6265] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 108.242851][ T6265] do_syscall_64+0xcd/0x4c0 [ 108.242875][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.242900][ T6265] RIP: 0033:0x7f6da118e9a9 [ 108.242917][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.242939][ T6265] RSP: 002b:00007f6d9eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 108.242960][ T6265] RAX: ffffffffffffffda RBX: 00007f6da13b6160 RCX: 00007f6da118e9a9 [ 108.242975][ T6265] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 108.242988][ T6265] RBP: 00007f6da1210d69 R08: 0000000000000000 R09: 0000000000000000 [ 108.243000][ T6265] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 108.243013][ T6265] R13: 0000000000000000 R14: 00007f6da13b6160 R15: 00007ffe2d26a428 [ 108.243043][ T6265] [ 109.119378][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.128853][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.137980][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.147346][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.155309][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.772462][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.825442][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 109.988530][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 110.032874][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.051266][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.059384][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.067209][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.075034][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.083491][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.091303][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.099117][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.106941][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.114744][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.122621][ T6279] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.165856][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.199724][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.241029][ T5876] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.290310][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.469909][ T5876] usb 5-1: config 0 descriptor?? [ 110.709829][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.741048][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.757755][ T6269] bridge_slave_0: entered allmulticast mode [ 110.807182][ T6269] bridge_slave_0: entered promiscuous mode [ 110.834676][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.841802][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.882947][ T6269] bridge_slave_1: entered allmulticast mode [ 110.890370][ T6269] bridge_slave_1: entered promiscuous mode [ 110.904736][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 110.904749][ T30] audit: type=1400 audit(1753757957.459:283): avc: denied { execute } for pid=6292 comm="syz.2.91" name="file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.909727][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.941550][ T30] audit: type=1400 audit(1753757957.459:284): avc: denied { read write } for pid=6289 comm="syz.0.90" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.990731][ T5876] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 111.005088][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.016786][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.025088][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.036115][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.044607][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.056223][ T30] audit: type=1400 audit(1753757957.459:285): avc: denied { open } for pid=6289 comm="syz.0.90" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.096889][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.136081][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.163027][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.171805][ T30] audit: type=1400 audit(1753757957.459:286): avc: denied { ioctl } for pid=6289 comm="syz.0.90" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.172733][ T6284] netlink: 80 bytes leftover after parsing attributes in process `syz.1.87'. [ 111.201903][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.257729][ T5851] Bluetooth: hci5: command tx timeout [ 111.334166][ T5876] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 111.341437][ T5876] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 111.373034][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 111.396671][ T5876] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 111.420198][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 111.452968][ T6284] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 111.467470][ T5876] microsoft 0003:045E:07DA.0004: no inputs found [ 111.471752][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.491281][ T5876] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 111.502554][ T6291] netlink: 'syz.0.90': attribute type 5 has an invalid length. [ 111.550652][ T5876] usb 5-1: USB disconnect, device number 8 [ 111.552176][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.650965][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 112.440467][ T6291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.449423][ T6291] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.458186][ T6291] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.466930][ T6291] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.502403][ T30] audit: type=1400 audit(1753757959.039:287): avc: denied { append } for pid=6305 comm="syz.4.94" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.588844][ T30] audit: type=1400 audit(1753757959.039:288): avc: denied { execute } for pid=6305 comm="syz.4.94" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.728774][ T6269] team0: Port device team_slave_0 added [ 112.827598][ T30] audit: type=1400 audit(1753757959.379:289): avc: denied { getopt } for pid=6309 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.272358][ T30] audit: type=1400 audit(1753757959.379:290): avc: denied { write } for pid=6309 comm="syz.2.95" lport=52268 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 113.387717][ T5851] Bluetooth: hci5: command tx timeout [ 113.442317][ T30] audit: type=1400 audit(1753757959.389:291): avc: denied { setopt } for pid=6309 comm="syz.2.95" lport=52268 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 113.685531][ T6269] team0: Port device team_slave_1 added [ 113.809489][ T6320] comedi comedi3: pcmda12: I/O port conflict (0x16000000,16) [ 114.198081][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.246931][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.386938][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.573112][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.580086][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.652981][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.816962][ T3573] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.910655][ T30] audit: type=1400 audit(1753757961.459:292): avc: denied { bind } for pid=6315 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.933264][ T6319] Bluetooth: MGMT ver 1.23 [ 114.979117][ T6328] dummy0: entered promiscuous mode [ 114.991797][ T6328] macvtap1: entered promiscuous mode [ 115.011026][ T6328] macvtap1: entered allmulticast mode [ 115.030855][ T6290] syz.0.90 (6290): drop_caches: 2 [ 115.031055][ T6328] dummy0: entered allmulticast mode [ 115.077298][ T6328] dummy0: left allmulticast mode [ 115.084372][ T6328] dummy0: left promiscuous mode [ 115.121894][ T3573] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.191432][ T6269] hsr_slave_0: entered promiscuous mode [ 115.202173][ T6269] hsr_slave_1: entered promiscuous mode [ 115.208445][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.216501][ T6269] Cannot create hsr debugfs directory [ 115.358245][ T3573] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.402750][ T5851] Bluetooth: hci5: command tx timeout [ 116.245977][ T3573] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.389526][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 116.389542][ T30] audit: type=1400 audit(1753757962.939:296): avc: denied { create } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.415469][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.458753][ T30] audit: type=1400 audit(1753757963.009:297): avc: denied { sys_module } for pid=6344 comm="syz.0.105" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 117.011698][ T6356] afs: Unknown parameter 'dy' [ 117.512223][ T5851] Bluetooth: hci5: command tx timeout [ 117.745466][ T30] audit: type=1400 audit(1753757964.299:298): avc: denied { search } for pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.832926][ T30] audit: type=1400 audit(1753757964.299:299): avc: denied { search } for pid=5498 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.940938][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.956212][ T30] audit: type=1400 audit(1753757964.299:300): avc: denied { search } for pid=5498 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.958009][ T6367] dlm: no local IP address has been set [ 117.979537][ T30] audit: type=1400 audit(1753757964.299:301): avc: denied { read } for pid=5498 comm="dhcpcd" name="n100" dev="tmpfs" ino=2421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.990993][ T6367] dlm: cannot start dlm midcomms -107 [ 118.006878][ T30] audit: type=1400 audit(1753757964.299:302): avc: denied { open } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.033663][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.204888][ T30] audit: type=1400 audit(1753757964.299:303): avc: denied { getattr } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.354155][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.374759][ T9] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 118.394347][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.417298][ T9] usb 1-1: config 0 descriptor?? [ 118.537874][ T3573] bridge_slave_1: left allmulticast mode [ 118.544903][ T3573] bridge_slave_1: left promiscuous mode [ 118.554328][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.569254][ T3573] bridge_slave_0: left allmulticast mode [ 118.591725][ T3573] bridge_slave_0: left promiscuous mode [ 118.613654][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.685933][ T30] audit: type=1400 audit(1753757965.239:304): avc: denied { read open } for pid=6373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.767547][ T30] audit: type=1400 audit(1753757965.239:305): avc: denied { getattr } for pid=6373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.888567][ T9] itetech 0003:258A:6A88.0005: item fetching failed at offset 7/11 [ 118.910213][ T9] itetech 0003:258A:6A88.0005: probe with driver itetech failed with error -22 [ 119.158658][ T6389] netlink: 96 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.210494][ T5851] Bluetooth: hci3: ISO packet too small [ 119.461160][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.485072][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.498972][ T3573] bond0 (unregistering): Released all slaves [ 119.620889][ T5910] usb 1-1: USB disconnect, device number 4 [ 119.894685][ T6269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.242414][ T6399] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 120.402731][ T6269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.037871][ T3573] hsr_slave_0: left promiscuous mode [ 121.067388][ T3573] hsr_slave_1: left promiscuous mode [ 121.088004][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.097912][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.504947][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.540407][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.591399][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 121.591416][ T30] audit: type=1400 audit(1753757968.139:319): avc: denied { mounton } for pid=6425 comm="syz.1.118" path="/23/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.651825][ T3573] veth1_macvtap: left promiscuous mode [ 121.721376][ T3573] veth0_macvtap: left promiscuous mode [ 121.744466][ T3573] veth1_vlan: left promiscuous mode [ 121.752609][ T3573] veth0_vlan: left promiscuous mode [ 121.856767][ T6433] x_tables: ip_tables: osf match: only valid for protocol 6 [ 121.933562][ T30] audit: type=1400 audit(1753757968.489:320): avc: denied { mounton } for pid=6411 comm="syz.2.116" path="/24/file0" dev="proc" ino=4026533348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 122.032778][ T30] audit: type=1400 audit(1753757968.549:321): avc: denied { connect } for pid=6436 comm="syz.0.120" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.174296][ T30] audit: type=1400 audit(1753757969.729:322): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.224603][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 123.287056][ T30] audit: type=1326 audit(1753757969.839:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.2.124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f414df8e9a9 code=0x0 [ 123.336768][ T3573] team0 (unregistering): Port device team_slave_0 removed [ 123.346850][ T30] audit: type=1400 audit(1753757969.899:324): avc: denied { accept } for pid=6454 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.453470][ T30] audit: type=1400 audit(1753757969.989:325): avc: denied { setopt } for pid=6456 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.597823][ T30] audit: type=1400 audit(1753757969.989:326): avc: denied { connect } for pid=6456 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.722335][ T30] audit: type=1400 audit(1753757970.179:327): avc: denied { write } for pid=6456 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.476632][ T6269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.732873][ T6269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.461420][ T30] audit: type=1400 audit(1753757973.009:328): avc: denied { create } for pid=6487 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.859358][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.988426][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.106554][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.113724][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.270867][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.278063][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.563701][ T30] audit: type=1400 audit(1753757974.119:329): avc: denied { getopt } for pid=6507 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.020777][ T6523] nfs: Deprecated parameter 'nointr' [ 128.644157][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 129.484993][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.609264][ T6550] random: crng reseeded on system resumption [ 129.628669][ T30] audit: type=1400 audit(1753757976.159:330): avc: denied { append } for pid=6541 comm="syz.0.140" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.978056][ T30] audit: type=1400 audit(1753757976.159:331): avc: denied { open } for pid=6541 comm="syz.0.140" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.033125][ T30] audit: type=1400 audit(1753757976.299:332): avc: denied { read write } for pid=6549 comm="syz.2.141" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.057220][ T30] audit: type=1400 audit(1753757976.309:333): avc: denied { open } for pid=6549 comm="syz.2.141" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.082643][ T30] audit: type=1400 audit(1753757976.359:335): avc: denied { bind } for pid=6541 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.101874][ T30] audit: type=1400 audit(1753757976.359:336): avc: denied { write } for pid=6541 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.121887][ T30] audit: type=1400 audit(1753757976.349:334): avc: denied { ioctl } for pid=6549 comm="syz.2.141" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.212669][ T5910] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.382465][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 130.405199][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 130.444636][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.496199][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.558236][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.679437][ T5910] usb 3-1: Product: syz [ 130.724513][ T30] audit: type=1400 audit(1753757977.209:337): avc: denied { append } for pid=6547 comm="syz.4.138" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.737440][ T5910] usb 3-1: Manufacturer: syz [ 130.977201][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.010491][ T5910] usb 3-1: SerialNumber: syz [ 131.033424][ T5910] usb 3-1: config 0 descriptor?? [ 131.055346][ T5910] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.071663][ T6560] loop6: detected capacity change from 0 to 524287999 [ 131.089946][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.093032][ T5910] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 131.149841][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.169837][ T6269] veth0_vlan: entered promiscuous mode [ 131.202645][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 131.211714][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.213096][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.234723][ T6269] veth1_vlan: entered promiscuous mode [ 131.260492][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 131.288131][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.309772][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.318443][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.358767][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.369265][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.387625][ T5848] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 131.396909][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.412405][ T5848] usb 2-1: Product: syz [ 131.418784][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.428614][ T5848] usb 2-1: Manufacturer: syz [ 131.433271][ T5848] usb 2-1: SerialNumber: syz [ 131.440931][ T5848] usb 2-1: config 0 descriptor?? [ 131.479955][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.499235][ T5848] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 131.515013][ T6560] ldm_validate_partition_table(): Disk read failed. [ 131.593906][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.728778][ T5848] imon:send_packet: packet tx failed (-71) [ 131.749057][ T6269] veth0_macvtap: entered promiscuous mode [ 131.764182][ T5848] imon 2-1:0.0: panel buttons/knobs setup failed [ 131.948824][ T6269] veth1_macvtap: entered promiscuous mode [ 131.986367][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.254638][ T5910] em28xx 3-1:0.0: unknown em28xx chip ID (37) [ 132.583754][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.605779][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.612358][ T30] audit: type=1400 audit(1753757979.019:338): avc: denied { write } for pid=6583 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.674639][ T5910] em28xx 3-1:0.0: Config register raw data: 0x0c [ 132.737882][ T6560] Dev loop6: unable to read RDB block 0 [ 132.798545][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.820037][ T6560] loop6: unable to read partition table [ 132.836301][ T5910] usb 3-1: USB disconnect, device number 6 [ 132.857485][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.867227][ T5910] em28xx 3-1:0.0: Disconnecting em28xx [ 132.886542][ T6560] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 132.908325][ T6269] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.921868][ T5910] em28xx 3-1:0.0: Freeing device [ 132.932842][ T5848] rc_core: IR keymap rc-imon-pad not found [ 132.959819][ T5848] Registered IR keymap rc-empty [ 132.971726][ T6269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.002632][ T5848] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 133.130840][ T6269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.139863][ T6269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.928141][ T30] audit: type=1400 audit(1753757980.479:339): avc: denied { write } for pid=6595 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 134.182593][ T5848] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.211176][ T5848] imon:send_packet: packet tx failed (-71) [ 134.262413][ T5848] imon 2-1:0.0: remote input dev register failed [ 134.269103][ T5848] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 134.389199][ T30] audit: type=1400 audit(1753757980.939:340): avc: denied { create } for pid=6603 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.581068][ T5848] imon 2-1:0.0: unable to initialize intf0, err 0 [ 134.617814][ T5848] imon:imon_probe: failed to initialize context! [ 134.642950][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.650925][ T5848] imon 2-1:0.0: unable to register, err -19 [ 134.717906][ T30] audit: type=1326 audit(1753757981.269:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.1.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ece38e9a9 code=0x0 [ 134.766842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.801086][ T5848] usb 2-1: USB disconnect, device number 2 [ 134.915958][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.934488][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.972422][ T30] audit: type=1400 audit(1753757981.519:342): avc: denied { mount } for pid=6269 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.027638][ T6624] netlink: 100 bytes leftover after parsing attributes in process `syz.4.150'. [ 135.070421][ T30] audit: type=1400 audit(1753757981.619:343): avc: denied { mount } for pid=6269 comm="syz-executor" name="/" dev="gadgetfs" ino=6856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.371466][ T30] audit: type=1400 audit(1753757981.909:344): avc: denied { mount } for pid=6633 comm="syz.2.153" name="/" dev="ramfs" ino=10147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.519732][ T30] audit: type=1400 audit(1753757981.969:345): avc: denied { mount } for pid=6633 comm="syz.2.153" name="/" dev="overlay" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 135.717438][ T30] audit: type=1400 audit(1753757982.229:346): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.882524][ T30] audit: type=1400 audit(1753757982.429:347): avc: denied { read } for pid=5188 comm="acpid" name="event8" dev="devtmpfs" ino=2851 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.002598][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.167731][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 136.182686][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.194218][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.314309][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.386857][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.420622][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.448315][ T9] usb 1-1: config 0 descriptor?? [ 137.013913][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.021186][ T9] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 137.031917][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.039315][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.073141][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.205475][ T6671] comedi comedi3: pcmda12: I/O port conflict (0x16000000,16) [ 137.542001][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.549357][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.556632][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.579082][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.610851][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.664221][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.711920][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 137.872380][ T9] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 137.936033][ T9] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 138.010042][ T9] microsoft 0003:045E:07DA.0006: no inputs found [ 138.032726][ T9] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 138.102088][ T9] usb 1-1: USB disconnect, device number 5 [ 138.573964][ T6677] fido_id[6677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 139.706939][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 139.774372][ T6701] IPVS: Error joining to the multicast group [ 139.816722][ T6695] input: syz1 as /devices/virtual/input/input10 [ 139.906978][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 139.906994][ T30] audit: type=1326 audit(1753757986.459:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804e78e9a9 code=0x0 [ 140.550958][ T6702] loop6: detected capacity change from 0 to 524287999 [ 140.569873][ T6702] buffer_io_error: 7 callbacks suppressed [ 140.569904][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.584122][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.592607][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.601121][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.615366][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.624138][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.634390][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.643044][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.651239][ T6702] ldm_validate_partition_table(): Disk read failed. [ 140.659948][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.674577][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.684389][ T6702] Dev loop6: unable to read RDB block 0 [ 140.693968][ T6702] loop6: unable to read partition table [ 140.700558][ T6702] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 141.423522][ T5203] ldm_validate_partition_table(): Disk read failed. [ 141.644040][ T30] audit: type=1400 audit(1753757988.199:354): avc: denied { bind } for pid=6726 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 141.762333][ T30] audit: type=1326 audit(1753757988.249:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.0.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804e78e9a9 code=0x0 [ 142.411124][ T5203] Dev loop6: unable to read RDB block 0 [ 142.419583][ T5203] loop6: unable to read partition table [ 142.761439][ T6749] ip6erspan0: entered promiscuous mode [ 143.976171][ T30] audit: type=1400 audit(1753757990.529:356): avc: denied { ioctl } for pid=6772 comm="syz.0.179" path="socket:[11405]" dev="sockfs" ino=11405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.305556][ T30] audit: type=1400 audit(1753757990.849:357): avc: denied { read write } for pid=6777 comm="syz.4.181" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.520494][ T6779] netlink: 76 bytes leftover after parsing attributes in process `syz.5.180'. [ 144.784683][ T30] audit: type=1400 audit(1753757990.889:358): avc: denied { open } for pid=6777 comm="syz.4.181" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 145.615674][ T30] audit: type=1400 audit(1753757991.489:359): avc: denied { ioctl } for pid=6777 comm="syz.4.181" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.896443][ T6785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.473318][ T30] audit: type=1400 audit(1753757993.019:360): avc: denied { create } for pid=6800 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 146.496685][ T6785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.546205][ T30] audit: type=1400 audit(1753757993.079:361): avc: denied { write } for pid=6800 comm="syz.4.186" path="socket:[11452]" dev="sockfs" ino=11452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 146.766312][ T30] audit: type=1400 audit(1753757993.319:362): avc: denied { getopt } for pid=6802 comm="syz.5.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.511804][ T6785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.690789][ T6785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.972300][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.025196][ T30] audit: type=1400 audit(1753757994.579:363): avc: denied { create } for pid=6832 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 148.054328][ T30] audit: type=1400 audit(1753757994.599:364): avc: denied { append } for pid=6832 comm="syz.4.191" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.192641][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 148.219840][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.251555][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.281985][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 148.363771][ T6838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.444844][ T30] audit: type=1400 audit(1753757994.999:365): avc: denied { create } for pid=6823 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.455177][ T6830] loop6: detected capacity change from 0 to 524287999 [ 148.528378][ T6785] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.536539][ T6586] buffer_io_error: 23 callbacks suppressed [ 148.536556][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.611403][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.624521][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.668057][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.670898][ T10] usb 6-1: config 0 descriptor?? [ 148.880316][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.889411][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.897370][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.906480][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.914499][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.917138][ T6785] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.922890][ T6586] ldm_validate_partition_table(): Disk read failed. [ 148.937573][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.947774][ T6586] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.958818][ T6586] Dev loop6: unable to read RDB block 0 [ 148.964887][ T6586] loop6: unable to read partition table [ 148.996158][ T6785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.015182][ T6830] ldm_validate_partition_table(): Disk read failed. [ 149.046983][ T6785] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.121662][ T6830] Dev loop6: unable to read RDB block 0 [ 149.150508][ T6830] loop6: unable to read partition table [ 149.168667][ T6830] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 149.181566][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 149.198227][ T10] apple 0003:05AC:024B.0007: unknown main item tag 0x6 [ 149.258035][ T10] apple 0003:05AC:024B.0007: ignoring exceeding usage max [ 149.289974][ T10] apple 0003:05AC:024B.0007: invalid report_size 16640 [ 149.301650][ T6846] zonefs (nbd4) ERROR: Not a zoned block device [ 149.318752][ T10] apple 0003:05AC:024B.0007: item 0 2 1 7 parsing failed [ 149.336637][ T10] apple 0003:05AC:024B.0007: parse failed [ 149.376637][ T10] apple 0003:05AC:024B.0007: probe with driver apple failed with error -22 [ 149.423919][ T10] usb 6-1: USB disconnect, device number 2 [ 149.651987][ T6854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.194'. [ 150.272685][ T30] audit: type=1400 audit(1753757996.199:366): avc: denied { write } for pid=6847 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.317997][ T30] audit: type=1400 audit(1753757996.199:367): avc: denied { nlmsg_write } for pid=6847 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.573742][ T6863] netlink: 'syz.5.199': attribute type 1 has an invalid length. [ 151.475228][ T6870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6870 comm=syz.5.199 [ 152.461885][ T30] audit: type=1400 audit(1753757999.009:368): avc: denied { listen } for pid=6897 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.292635][ T30] audit: type=1400 audit(1753757999.839:369): avc: denied { bind } for pid=6906 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.333875][ T6913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.795732][ T6916] ceph: No mds server is up or the cluster is laggy [ 153.968485][ T5970] libceph: connect (1)[c::]:6789 error -101 [ 154.061509][ T5970] libceph: mon0 (1)[c::]:6789 connect error [ 154.678492][ T30] audit: type=1400 audit(1753758001.219:370): avc: denied { bind } for pid=6931 comm="syz.5.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.779976][ T6965] warning: `syz.1.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.680714][ T30] audit: type=1400 audit(1753758004.229:371): avc: denied { read write } for pid=6968 comm="syz.1.219" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.805786][ T30] audit: type=1400 audit(1753758004.229:372): avc: denied { open } for pid=6968 comm="syz.1.219" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.913515][ T30] audit: type=1400 audit(1753758004.459:373): avc: denied { ioctl } for pid=6972 comm="syz.0.220" path="socket:[12055]" dev="sockfs" ino=12055 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.172570][ T5970] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 158.189977][ T30] audit: type=1400 audit(1753758004.559:374): avc: denied { read } for pid=6972 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.227838][ T6982] 9pnet_fd: Insufficient options for proto=fd [ 158.228169][ T30] audit: type=1400 audit(1753758004.659:375): avc: denied { bind } for pid=6972 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.289191][ T30] audit: type=1400 audit(1753758004.769:376): avc: denied { read write } for pid=6980 comm="syz.4.222" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.350177][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.364934][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.375613][ T5970] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 158.411521][ T30] audit: type=1400 audit(1753758004.769:377): avc: denied { open } for pid=6980 comm="syz.4.222" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.437601][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.449605][ T5970] usb 2-1: config 0 descriptor?? [ 158.719402][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.736024][ T30] audit: type=1400 audit(1753758005.269:378): avc: denied { ioctl } for pid=6990 comm="syz.0.223" path="socket:[12097]" dev="sockfs" ino=12097 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.855184][ T30] audit: type=1400 audit(1753758005.319:379): avc: denied { ioctl } for pid=6958 comm="syz.5.217" path="socket:[12101]" dev="sockfs" ino=12101 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.872356][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 158.924315][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.942410][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.971048][ T5970] wacom 0003:056A:0217.0008: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 158.995880][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.077667][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.097244][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.129137][ T43] usb 3-1: config 0 descriptor?? [ 159.195670][ T6971] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 159.222372][ T5970] Process accounting resumed [ 159.982552][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 159.989780][ T43] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 160.103862][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.130456][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.160508][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.183279][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.209319][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.231787][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.247408][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.255253][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.267147][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.277232][ T43] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.288223][ T43] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 160.373514][ T43] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 160.461090][ T43] microsoft 0003:045E:07DA.0009: no inputs found [ 160.481890][ T43] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 161.080294][ T43] usb 3-1: USB disconnect, device number 7 [ 161.200656][ T30] audit: type=1400 audit(1753758007.749:380): avc: denied { getopt } for pid=7028 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.302583][ T5848] usb 2-1: USB disconnect, device number 3 [ 161.760170][ T7042] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 161.772986][ T7042] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 163.050415][ T7063] comedi comedi3: pcmda12: I/O port conflict (0x16000000,16) [ 163.542408][ T5848] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.631475][ T5970] Process accounting resumed [ 163.836417][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.016569][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 164.082885][ T5848] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.268989][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.297850][ T5848] usb 2-1: Product: syz [ 164.302085][ T5848] usb 2-1: Manufacturer: syz [ 164.370709][ T5848] usb 2-1: SerialNumber: syz [ 164.431957][ T5848] usb 2-1: config 0 descriptor?? [ 164.599619][ T5848] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 164.640479][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 164.640495][ T30] audit: type=1400 audit(1753758011.189:384): avc: denied { create } for pid=7081 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.681980][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7088 comm=syz.4.242 [ 164.890680][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 164.907629][ T7094] netlink: 'syz.2.244': attribute type 5 has an invalid length. [ 164.961067][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 164.962716][ T7097] xt_hashlimit: overflow, try lower: 17286/0 [ 164.977577][ T30] audit: type=1326 audit(1753758011.529:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.5.245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ff78e9a9 code=0x0 [ 165.039916][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.061819][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.080729][ T30] audit: type=1400 audit(1753758011.589:386): avc: denied { validate_trans } for pid=7061 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 165.093877][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.130892][ T7094] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 165.136652][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.141141][ T7094] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 165.159900][ T7094] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 165.172359][ T7094] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 165.181158][ T7094] geneve2: entered promiscuous mode [ 165.190119][ T7094] geneve2: entered allmulticast mode [ 165.257045][ T5848] usb 2-1: USB disconnect, device number 4 [ 165.345265][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.885159][ T7120] binder: 7118:7120 ioctl c0306201 2000000003c0 returned -22 [ 165.972404][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.250'. [ 166.092551][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.250'. [ 166.154699][ T7129] netlink: 'syz.5.249': attribute type 1 has an invalid length. [ 166.163285][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.249'. [ 166.502318][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 166.525764][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 166.648494][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 166.793150][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 167.383210][ T30] audit: type=1400 audit(1753758013.939:387): avc: denied { write } for pid=7154 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.619891][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 167.648213][ T7155] net_ratelimit: 44 callbacks suppressed [ 167.648224][ T7155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.782347][ T30] audit: type=1400 audit(1753758014.269:388): avc: denied { audit_write } for pid=7164 comm="syz.4.258" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.224916][ T30] audit: type=1326 audit(1753758014.779:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f414df8e9a9 code=0x0 [ 169.182410][ T30] audit: type=1400 audit(1753758015.729:390): avc: denied { setopt } for pid=7193 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.343536][ T30] audit: type=1400 audit(1753758015.879:391): avc: denied { write } for pid=7193 comm="syz.4.265" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 170.001840][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 170.138132][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.157011][ T5848] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 170.181697][ T5848] usb 6-1: can't read configurations, error -71 [ 170.498337][ T7208] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 170.611488][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.812359][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 170.841519][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.899885][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.931035][ T7215] Process accounting resumed [ 170.989317][ T10] usb 2-1: Product: syz [ 171.038253][ T10] usb 2-1: Manufacturer: syz [ 171.060947][ T10] usb 2-1: SerialNumber: syz [ 171.125064][ T10] usb 2-1: config 0 descriptor?? [ 171.185117][ T7210] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 171.409425][ T7237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.894121][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.529231][ T5851] Bluetooth: hci2: command 0x0401 tx timeout [ 173.568502][ T30] audit: type=1326 audit(1753758020.119:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f804e78e9a9 code=0x0 [ 173.622292][ T5970] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 173.663393][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.681511][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 173.753153][ T5970] usb 5-1: device descriptor read/64, error -71 [ 173.862944][ T10] usb 2-1: media controller created [ 173.900000][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.108287][ T5970] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 174.522859][ T5970] usb 5-1: device descriptor read/64, error -71 [ 174.607194][ T10] i2c i2c-1: Added multiplexed i2c bus 2 [ 174.637602][ T10] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 174.656448][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 174.685758][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 174.700784][ T5970] usb usb5-port1: attempt power cycle [ 174.918572][ T30] audit: type=1800 audit(1753758021.469:393): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.280" name="/" dev="tmpfs" ino=34 res=0 errno=0 [ 175.089242][ T5970] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 175.159228][ T5970] usb 5-1: device descriptor read/8, error -71 [ 175.216864][ T43] Process accounting resumed [ 175.256461][ T10] usb 2-1: USB disconnect, device number 5 [ 175.453218][ T5970] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 175.467801][ T30] audit: type=1400 audit(1753758022.019:394): avc: granted { setsecparam } for pid=7298 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 175.565506][ T5970] usb 5-1: device descriptor read/8, error -71 [ 175.693167][ T5970] usb usb5-port1: unable to enumerate USB device [ 175.922700][ T30] audit: type=1400 audit(1753758022.469:395): avc: denied { create } for pid=7313 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 176.196802][ T30] audit: type=1400 audit(1753758022.739:396): avc: denied { getopt } for pid=7319 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.636565][ T7322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 177.062595][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 177.071414][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 177.805457][ T7340] overlayfs: conflicting lowerdir path [ 178.050827][ T30] audit: type=1400 audit(1753758024.419:397): avc: denied { connect } for pid=7333 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.192952][ T7346] comedi comedi3: pcmda12: I/O port conflict (0x16000000,16) [ 179.641896][ T30] audit: type=1400 audit(1753758026.189:398): avc: denied { create } for pid=7352 comm="syz.2.295" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.662447][ T55] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 179.694447][ T30] audit: type=1400 audit(1753758026.229:399): avc: denied { link } for pid=7352 comm="syz.2.295" name="#9" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.824870][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.862306][ T30] audit: type=1400 audit(1753758026.229:400): avc: denied { rename } for pid=7352 comm="syz.2.295" name="#a" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.885831][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.948879][ T55] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 180.011785][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.411916][ T55] usb 6-1: config 0 descriptor?? [ 180.490880][ T7379] netlink: 116 bytes leftover after parsing attributes in process `syz.2.298'. [ 180.634292][ T55] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 180.663232][ T55] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 180.749891][ T55] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000A/input/input15 [ 180.977047][ T55] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 181.006918][ T30] audit: type=1400 audit(1753758027.559:401): avc: denied { accept } for pid=7385 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.014835][ T55] usb 6-1: USB disconnect, device number 5 [ 181.033152][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.206160][ T5923] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 181.249948][ T5923] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.275342][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.306205][ T7393] fido_id[7393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 181.384214][ T5923] usb 3-1: Product: syz [ 181.388433][ T5923] usb 3-1: Manufacturer: syz [ 181.490021][ T5923] usb 3-1: SerialNumber: syz [ 181.565334][ T5923] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.602593][ T30] audit: type=1400 audit(1753758028.149:402): avc: denied { firmware_load } for pid=55 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 181.624606][ T55] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.863783][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.922764][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.932896][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.107497][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.854601][ T55] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 182.870840][ T55] ath9k_htc: Failed to initialize the device [ 182.965045][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.032728][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.054366][ T5910] usb 3-1: USB disconnect, device number 8 [ 183.080871][ T5910] usb 3-1: ath9k_htc: USB layer deinitialized [ 183.682780][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.765965][ T30] audit: type=1400 audit(1753758030.319:403): avc: denied { setopt } for pid=7423 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.362383][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 184.426163][ T30] audit: type=1400 audit(1753758030.339:404): avc: denied { connect } for pid=7423 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.441514][ T5910] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 184.538027][ T30] audit: type=1400 audit(1753758030.439:405): avc: denied { getopt } for pid=7423 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.567810][ T5910] usb 3-1: can't read configurations, error -71 [ 184.658223][ T7438] Illegal XDP return value 956833367 on prog (id 66) dev N/A, expect packet loss! [ 184.895745][ T7445] lo speed is unknown, defaulting to 1000 [ 184.902627][ T7445] lo speed is unknown, defaulting to 1000 [ 185.000873][ T7445] lo speed is unknown, defaulting to 1000 [ 185.064741][ T7445] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.080456][ T7445] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.555429][ T30] audit: type=1400 audit(1753758032.109:406): avc: denied { map } for pid=7441 comm="syz.2.311" path="socket:[14247]" dev="sockfs" ino=14247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 185.587267][ T7445] lo speed is unknown, defaulting to 1000 [ 185.594977][ T7445] lo speed is unknown, defaulting to 1000 [ 185.604318][ T7445] lo speed is unknown, defaulting to 1000 [ 185.611676][ T7445] lo speed is unknown, defaulting to 1000 [ 185.620643][ T7445] lo speed is unknown, defaulting to 1000 [ 185.748065][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.812098][ T30] audit: type=1400 audit(1753758032.109:407): avc: denied { accept } for pid=7441 comm="syz.2.311" path="socket:[14247]" dev="sockfs" ino=14247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 185.922821][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 185.929689][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.949159][ T5848] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.009887][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.604354][ T5848] usb 1-1: config 0 descriptor?? [ 187.660643][ T5848] usb 1-1: can't set config #0, error -71 [ 187.670074][ T5848] usb 1-1: USB disconnect, device number 6 [ 187.714294][ T7461] ------------[ cut here ]------------ [ 187.720151][ T7461] WARNING: CPU: 1 PID: 7461 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 187.731023][ T7461] Modules linked in: [ 187.735966][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.5.313 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 187.743126][ T30] audit: type=1400 audit(1753758034.259:408): avc: denied { load_policy } for pid=7449 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 187.746306][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.778733][ T7461] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 187.785898][ T7461] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 187.806186][ T7461] RSP: 0018:ffffc9000535f3e8 EFLAGS: 00010246 [ 187.813330][ T7461] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 187.819134][ T7463] xt_limit: Overflow, try lower: 0/0 [ 187.821368][ T7461] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 187.835357][ T7461] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 187.843548][ T7461] R10: 0000000080000000 R11: 55455551464e0028 R12: 0000000000000016 [ 187.851551][ T7461] R13: 1ffff92000a6be92 R14: 0000000400000000 R15: 0000000000000016 [ 187.859808][ T7461] FS: 00007fb3005a46c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 187.869072][ T7461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.875828][ T7461] CR2: 000000110c370ee8 CR3: 00000000250e8000 CR4: 00000000003526f0 [ 187.883908][ T7461] Call Trace: [ 187.887269][ T7461] [ 187.890200][ T7461] ? stack_trace_save+0x8e/0xc0 [ 187.895098][ T7461] ? __pfx_stack_trace_save+0x10/0x10 [ 187.900476][ T7461] ? stack_depot_save_flags+0x28/0xa40 [ 187.906014][ T7461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.912417][ T7461] ? kasan_save_stack+0x42/0x60 [ 187.917300][ T7461] ? kasan_save_stack+0x33/0x60 [ 187.922277][ T7461] ? kasan_save_track+0x14/0x30 [ 187.927239][ T7461] ? __kasan_kmalloc+0xaa/0xb0 [ 187.932040][ T7461] ? class_read+0xe2/0xa30 [ 187.936660][ T7461] ? policydb_read+0x871/0x3220 [ 187.941527][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.947665][ T7461] ? hashtab_init+0x1b1/0x290 [ 187.952414][ T7461] __alloc_pages_noprof+0xb/0x1b0 [ 187.957496][ T7461] ___kmalloc_large_node+0x84/0x1e0 [ 187.963165][ T7461] ? hashtab_init+0x1b1/0x290 [ 187.967857][ T7461] __kmalloc_large_node_noprof+0x1c/0x70 [ 187.973779][ T7461] __kmalloc_noprof.cold+0xc/0x61 [ 187.978821][ T7461] hashtab_init+0x1b1/0x290 [ 187.983489][ T7461] ? __asan_memcpy+0x3c/0x60 [ 187.988103][ T7461] class_read+0x205/0xa30 [ 187.992480][ T7461] ? __pfx_class_read+0x10/0x10 [ 187.997335][ T7461] ? rcu_is_watching+0x12/0xc0 [ 188.002106][ T7461] ? trace_kmalloc+0x2b/0xd0 [ 188.006859][ T7461] ? __kmalloc_noprof.cold+0x5c/0x61 [ 188.012165][ T7461] ? __pfx_class_read+0x10/0x10 [ 188.017060][ T7461] policydb_read+0x871/0x3220 [ 188.021786][ T7461] ? __pfx_policydb_read+0x10/0x10 [ 188.027030][ T7461] security_load_policy+0x15c/0x12c0 [ 188.032390][ T7461] ? __pfx_security_load_policy+0x10/0x10 [ 188.038124][ T7461] ? find_held_lock+0x2b/0x80 [ 188.042850][ T7461] ? __might_fault+0xe3/0x190 [ 188.047599][ T7461] ? __might_fault+0xe3/0x190 [ 188.052378][ T7461] ? __might_fault+0x13b/0x190 [ 188.057176][ T7461] sel_write_load+0x332/0x1bd0 [ 188.061970][ T7461] ? __lock_acquire+0xb8a/0x1c90 [ 188.066999][ T7461] ? __pfx_sel_write_load+0x10/0x10 [ 188.072807][ T7461] ? __pfx_sel_write_load+0x10/0x10 [ 188.078135][ T7461] vfs_write+0x2a0/0x1150 [ 188.082726][ T7461] ? __pfx___mutex_lock+0x10/0x10 [ 188.087820][ T7461] ? __pfx_vfs_write+0x10/0x10 [ 188.092643][ T7461] ? __fget_files+0x20e/0x3c0 [ 188.097350][ T7461] ksys_write+0x12a/0x250 [ 188.101704][ T7461] ? __pfx_ksys_write+0x10/0x10 [ 188.106656][ T7461] do_syscall_64+0xcd/0x4c0 [ 188.111195][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.117163][ T7461] RIP: 0033:0x7fb2ff78e9a9 [ 188.121585][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.141320][ T7461] RSP: 002b:00007fb3005a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.149995][ T7461] RAX: ffffffffffffffda RBX: 00007fb2ff9b6160 RCX: 00007fb2ff78e9a9 [ 188.158041][ T7461] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009 [ 188.166086][ T7461] RBP: 00007fb2ff810d69 R08: 0000000000000000 R09: 0000000000000000 [ 188.174132][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.182487][ T7461] R13: 0000000000000000 R14: 00007fb2ff9b6160 R15: 00007ffe9a297048 [ 188.190518][ T7461] [ 188.193721][ T7461] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.200988][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.5.313 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 188.210813][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.220876][ T7461] Call Trace: [ 188.224152][ T7461] [ 188.227097][ T7461] dump_stack_lvl+0x3d/0x1f0 [ 188.231706][ T7461] panic+0x71c/0x800 [ 188.235627][ T7461] ? __pfx_panic+0x10/0x10 [ 188.240037][ T7461] ? show_trace_log_lvl+0x29b/0x3e0 [ 188.245310][ T7461] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 188.251422][ T7461] check_panic_on_warn+0xab/0xb0 [ 188.256581][ T7461] __warn+0xf6/0x3c0 [ 188.260497][ T7461] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 188.266640][ T7461] report_bug+0x3c3/0x580 [ 188.271019][ T7461] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 188.277127][ T7461] handle_bug+0x184/0x210 [ 188.281503][ T7461] exc_invalid_op+0x17/0x50 [ 188.286021][ T7461] asm_exc_invalid_op+0x1a/0x20 [ 188.290898][ T7461] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 188.297572][ T7461] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 188.317182][ T7461] RSP: 0018:ffffc9000535f3e8 EFLAGS: 00010246 [ 188.323240][ T7461] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 188.331200][ T7461] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 188.339189][ T7461] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 188.347146][ T7461] R10: 0000000080000000 R11: 55455551464e0028 R12: 0000000000000016 [ 188.355124][ T7461] R13: 1ffff92000a6be92 R14: 0000000400000000 R15: 0000000000000016 [ 188.363117][ T7461] ? stack_trace_save+0x8e/0xc0 [ 188.367964][ T7461] ? __pfx_stack_trace_save+0x10/0x10 [ 188.373329][ T7461] ? stack_depot_save_flags+0x28/0xa40 [ 188.378786][ T7461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 188.385162][ T7461] ? kasan_save_stack+0x42/0x60 [ 188.390128][ T7461] ? kasan_save_stack+0x33/0x60 [ 188.394981][ T7461] ? kasan_save_track+0x14/0x30 [ 188.399824][ T7461] ? __kasan_kmalloc+0xaa/0xb0 [ 188.404577][ T7461] ? class_read+0xe2/0xa30 [ 188.408981][ T7461] ? policydb_read+0x871/0x3220 [ 188.413829][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.419986][ T7461] ? hashtab_init+0x1b1/0x290 [ 188.424663][ T7461] __alloc_pages_noprof+0xb/0x1b0 [ 188.429829][ T7461] ___kmalloc_large_node+0x84/0x1e0 [ 188.435142][ T7461] ? hashtab_init+0x1b1/0x290 [ 188.439827][ T7461] __kmalloc_large_node_noprof+0x1c/0x70 [ 188.445485][ T7461] __kmalloc_noprof.cold+0xc/0x61 [ 188.450720][ T7461] hashtab_init+0x1b1/0x290 [ 188.455270][ T7461] ? __asan_memcpy+0x3c/0x60 [ 188.459860][ T7461] class_read+0x205/0xa30 [ 188.464219][ T7461] ? __pfx_class_read+0x10/0x10 [ 188.469095][ T7461] ? rcu_is_watching+0x12/0xc0 [ 188.473855][ T7461] ? trace_kmalloc+0x2b/0xd0 [ 188.478428][ T7461] ? __kmalloc_noprof.cold+0x5c/0x61 [ 188.483762][ T7461] ? __pfx_class_read+0x10/0x10 [ 188.488634][ T7461] policydb_read+0x871/0x3220 [ 188.493334][ T7461] ? __pfx_policydb_read+0x10/0x10 [ 188.498452][ T7461] security_load_policy+0x15c/0x12c0 [ 188.503757][ T7461] ? __pfx_security_load_policy+0x10/0x10 [ 188.509490][ T7461] ? find_held_lock+0x2b/0x80 [ 188.514166][ T7461] ? __might_fault+0xe3/0x190 [ 188.518839][ T7461] ? __might_fault+0xe3/0x190 [ 188.523542][ T7461] ? __might_fault+0x13b/0x190 [ 188.528316][ T7461] sel_write_load+0x332/0x1bd0 [ 188.533110][ T7461] ? __lock_acquire+0xb8a/0x1c90 [ 188.538067][ T7461] ? __pfx_sel_write_load+0x10/0x10 [ 188.543285][ T7461] ? __pfx_sel_write_load+0x10/0x10 [ 188.548498][ T7461] vfs_write+0x2a0/0x1150 [ 188.552846][ T7461] ? __pfx___mutex_lock+0x10/0x10 [ 188.557865][ T7461] ? __pfx_vfs_write+0x10/0x10 [ 188.562631][ T7461] ? __fget_files+0x20e/0x3c0 [ 188.567309][ T7461] ksys_write+0x12a/0x250 [ 188.571635][ T7461] ? __pfx_ksys_write+0x10/0x10 [ 188.576503][ T7461] do_syscall_64+0xcd/0x4c0 [ 188.581025][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.586933][ T7461] RIP: 0033:0x7fb2ff78e9a9 [ 188.591372][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.610991][ T7461] RSP: 002b:00007fb3005a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.619424][ T7461] RAX: ffffffffffffffda RBX: 00007fb2ff9b6160 RCX: 00007fb2ff78e9a9 [ 188.627417][ T7461] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009 [ 188.635394][ T7461] RBP: 00007fb2ff810d69 R08: 0000000000000000 R09: 0000000000000000 [ 188.643387][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.651384][ T7461] R13: 0000000000000000 R14: 00007fb2ff9b6160 R15: 00007ffe9a297048 [ 188.659399][ T7461] [ 188.662677][ T7461] Kernel Offset: disabled [ 188.667026][ T7461] Rebooting in 86400 seconds..